Installation and Users Manual
PENTAGRAM Cerberus ADSL Wi-Fi Lite
NOTE! Any information and technical data are subject to change without prior notification and/or indication in this manual. 2006 PENTAGRAM All rights reserved; copying and reproduction is strictly forbidden.

Cerberus ADSL Wi-Fi Lite

INTRODUCTION.... 5 PACKAGE CONTENTS.... 5 FEATURES.... 6 PRODUCT OVERVIEW.... 7 IMPORTANT NOTES... 7 FRONT LEDS.... 7 THE REAR PORTS.... 8 DEFAULT SETTINGS... 8 RESETTING ROUTER... 9 CONNECTING CERBERUS TO COMPUTER... 9 CONFIGURE TCP/IP... 9 CONFIGURE ROUTER VIA WEB BROWSER.. 13 LOGIN.... 13 NAVIGATION.... 14 QUICK START WIZARD... 15 INTERFACE SETUP TAB.... 20 ADVANCED SETUP TAB.... 29 ACCESS MANAGEMENT TAB... 37 MAINTENANCE TAB.... 42 STATUS TAB.... 46 HELP TAB.... 50 TROUBLESHOOTING.... 51 USING LEDS TO DIAGNOSE PROBLEMS.. 51 PROBLEMS WITH THE WEB INTERFACE.. 51 PROBLEMS WITH THE LOGIN USERNAME AND PASSWORD. 52 PROBLEMS WITH LAN INTERFACE... 52 PROBLEMS WITH WAN INTERFACE.. 52 PROBLEMS WITH THE INTERNET ACCESS.. 53

Introduction

Thank you for purchasing the Cerberus ADSL Wi-Fi Lite ADSL2+ Modem/Router by PENTAGRAM. Your new router is an all-in-one unit that combines an ADSL modem, ADSL router and Ethernet network switch to provide everything you need to get the machines on your network connected to the Internet over an ADSL broadband connection. The Cerberus ADSL Wi-Fi Lite router complies with ADSL2+ standards for deployment worldwide and supports downstream rates of up to 24 Mbps and upstream rates of up to 1 Mbps. Designed for small office, home office and residential users, the router enables even faster Internet connections. You can enjoy ADSL services and broadband multimedia applications such as interactive gaming, video streaming and real-time audio much easier and faster than ever before. Your new router also serves as an Internet firewall, protecting your network from access by outside users. Not only does it provide a natural firewall function with Network Address Translation (NAT), it also provides rich firewall features to secure your network. All incoming data packets are monitored and filtered. You can also configure your new router to block internal users from accessing the Internet. The Integrated DHCP (Dynamic Host Control Protocol) client and server services allow multiple users to get IP addresses automatically when the router boots up. Simply set local machines as a DHCP client to accept a dynamically assigned IP address from the DHCP server and reboot. Each time a local machine is powered up; the router recognizes it and assigns an IP address to instantly connect it to the LAN. For advanced users, Virtual Service (port forwarding) functions allow the product to provide limited visibility to local machines with specific services for outside users. You can set an ISP (Internet Service Provider) provided IP address on the Cerberus ADSL Wi-Fi Lite and then you can reroute specific services to individual computers on your local network. For instance, a dedicated web server can be connected to the Internet via the router and then incoming requests for web pages that are received by the router can be rerouted to your dedicated local web server, even though the server now has a different IP address. Virtual Server can also be used to re-task services to multiple servers. For instance, you can set the router to allow separated FTP, Web, and Multiplayer game servers to share the same Internet-visible IP address while still protecting the servers and LAN users from hackers.

Package Contents

1. 2. 3. 4. 5. 6. PENTAGRAM Cerberus ADSL Wi-Fi Lite Power adapter 12 V, 1 A Ethernet cable (RJ-45) Telephone cable (RJ-11) CD Quick Installation Guide

Cerberus ADSL Wi-Fi Lite Firmware Upgradeable: You can upgrade the router with the latest firmware through its web-based GUI. High Speed Internet Access: downstream rates of up to 24Mbps and upstream rates of up to 1Mbps. Cerberus ADSL Wi-Fi Lite is compliant with the following standards: ANSI T1.413 issue 2, ITU-T G.992.1 (G.dmt), ITU-T G.992.2 (G.lite), G.994.1 (G.hs, Multimode), ITU-T G.992.3 (ADSL2 G.dmt.bis), ITU-T G.992.4 (ADSL2 G.lite.bis), ITU-T G.992.5 (ADSL2+; Annex A, I, J, L & M), Reach Extended ADSL (RE ADSL). Multi-Protocol to Establish a Connection: The router supports PPPoA (RFC 2364 - PPP over ATM Adaptation Layer 5), RFC 1483/2684 encapsulation over ATM (bridged or routed), PPP over Ethernet (RFC 2516) and IPoA (RFC1577) to establish a connection with an ISP. The router also supports VC-based and LLC-based multiplexing.

Product Overview

Important Notes
Do not use the router in high humidity or high temperatures. Do not use the same power source for the router as other equipment. Do not open or repair the case yourself. If the router is too hot, turn off the power immediately and have it repaired at a qualified service center. Avoid using this product and all accessories outdoors. Place the router on a stable surface. Only use the power adapter that comes with the package. Using a different voltage rating power adaptor may damage the router.

Front LEDs

PWR WLAN LAN1 LAN2 LAN3 LAN4 ADSL
Description Lights when the power is ON. Lit green when the wireless connection is established. Flashes when sending/receiving data. Steady glow when connected to an Ethernet device. Glows green for 100Mbps; Orange for 10Mbps. Blinking light when data is Transmitted / Received. Lights when successfully connected to an ADSL DSLAM Blinking when router is trying to connect to a DSLAM.

The Rear Ports

LINE (RJ-11) LAN (RJ-45)

DEFAULT PWR ON/OFF

Connect the supplied RJ-11 (telephone) cable to this port when connecting to the ADSL/telephone network. Connect a UTP Ethernet cable (Cat-5 or Cat-5e) to one of the four LAN ports when connecting to a PC or an office/home network of 10Mbps or 100Mbps. After the router is powered on, press this recessed button using the end of paper clip or other small pointed object to reset the router or to restore it to factory default settings. Connect the supplied power adapter to this jack. Power switch button.

Default Settings

Before changing configuration familiarize yourself with these default settings. LAN/WLAN Ports IP Address Subnet Mask DHCP Server DHCP Server IP Address Pool IP Address Lease Time User Name Password 10.0.0.2 255.0.0.0 Enabled 12 IP addresses from 10.0.0.seconds (72 hours) admin trendchip
If you ever forget the password to log in, you may need to reset router to restore the factory default settings. This procedure is described on the next page.

Resetting router

Turn router on and wait for ADSL LED to lit or start blinking. Press and hold DEFAULT button on the back panel of router for 5-10 seconds and then release it. After reset LEDs will return to their normal behavior and all settings will be reset to their default value. You can login web configurator using default username and password: admin / trenchip.
Connecting Cerberus to Computer.
Cerberus can be connected to computer via Ethernet or WLAN:
Connecting via Ethernet Port (Ethernet Card)
If there is an available LAN card present on your PC, you just simply connect ADSL router and PC through the Ethernet cable. Once you establish Internet connection, you could browse the Web through the Ethernet cable.
Connecting via WLAN Interface (Wireless Card)
To connect PC to Cerberus via WLAN, Wireless Adapter must be properly installed and configured and both router and PC must be in the same subnet.

Configure TCP/IP

This part will help you to configure your computer to communicate with Cerberus ADSL Wi-Fi Lite router properly. Computer must be either equipped with network adapter connected directly to Cerberus ADSL Wi-Fi Lite router or wireless network adapter (compatible with Wi-Fi 802.11b/g standard). Wireless network adapter must have the same session ID (ESSID) and establish connection with the network created by router. You can also connect to Cerberus ADSL Wi-Fi Lite router via network hub/switch. Default IP address of the router is 10.0.0.2 and subnet mask is 255.0.0.0. Fastest and easiest method to configure your computer is to obtain an IP address automatically from routers DHCP server. Make sure that TCP/IP protocol and network adapter are installed on your computer.

Windows 2000/XP

1. Click Start Settings Control Panel. Double-click the Network Connections (2000/XP Classic view) or click Network and Internet Connections and then Network Connections (XP Default view). Double-click the Local Area Connection.
Click the Properties button.
Go to General tab, select Internet Protocol (TCP/IP) and click Properties.
Go to General tab, select Obtain an IP address automatically and DNS server address automatically. Then, click OK.

Windows 95/98/Me

1. 2. Click Start Settings Control Panel. Double-click the Network icon. Go to Configuration tab, select TCP/IP for network adapter installed and click Properties.

Go to IP Address tab and select Obtain an IP address automatically.
Go to DNS Configuration tab, select Disable DNS and click OK.

Windows NT

1. 2. Click Start Settings Control Panel. Double-click the Network icon. Go to Protocols tab, select TCP/IP Protocol and click Properties.
Go to IP Address tab, select Obtain an IP address from DHCP server and click OK.
To make sure that network adapter properly obtained an IP address from routers DHCP server, click Start > Run and type cmd (Win 2000/XP) or command (Win 98/ME). In command line type ipconfig /all and check that value of the IP Address is 10.0.0.x
Configure router via web browser
Cerberus ADSL Wi-Fi Lite router can be configured via web browser, which is usually integrated with operating system. Router offers clear and simple interface.
1. 2. Launch the Web browser Enter the default IP address: 10.0.0.2
Enter default username (admin) and password (trendchip)

Navigation

Steps to navigate the Web configuration from the Site Map are summarized below: Quick Start wizard that helps to configure your router, Interface Setup configure Internet and LAN functions, Advanced Setup configure advanced features, Access Management manage Internet access options, Maintenance set a new password, set the time zone, upgrade or reload firmware and run diagnostic tests on the router, Status router device information, system logs and performance statistics, Help available help topics.

Quick Start Wizard

Click Quick Start to guide you to configure the device to connect your ISP and have Internet access within minutes. This Quick Start will guide you step by step to configure the password, time zone, and WAN settings of you device. This Wizard is a helpful guide for first time uses to the device. It is strongly recommended to use Quick Start to configure your ADSL settings.
Click on the RUN WIZARD button to start the Quick Start wizard. The Quick Start wizard will open a new browser window with the following screen:
Please follow the quick start step by step to configure the device. Click on NEXT to continue, or on EXIT to exit the wizard without saving.

Setting a New Password

This screen helps you set a new password, replacing the default password.

Enter new password in New Password and Confirmed Password fields. Click on BACK to return to the previous screen, on NEXT to continue, or on EXIT to exit the wizard without saving.

Choose your Time Zone

Select the appropriate time zone for your location from the dropdown list. Click on BACK to return to the previous screen, on NEXT to continue, or on EXIT to exit the wizard without saving.
Set your Internet Connection

Glossary:

Multiplexing - Two conventions identify what protocols a virtual circuit (VC) is carrying. Be sure to use the multiplexing method your ISP requires: VC-Based Multiplexing In VC-based multiplexing, by prior mutual agreement, each protocol is assigned to a specific virtual circuit. For example, VC1 carries IP, etc. VCbased multiplexing may be dominant in environments where dynamic creation of large numbers of ATM VCs is fast and economical. LLC-Based Multiplexing In LLC-based multiplexing, one VC carries multiple protocols with protocol-identifying information contained in each packet header. While this method requires extra bandwidth and processing overhead, this method may be advantageous if it is not practical to have a separate VC for each carried protocol; for example, if charging heavily depends on the number of simultaneous VCs. VPI and VCI - Be sure to use the Virtual Path Identifier (VPI) and Virtual Channel Identifier (VCI) numbers assigned to you. The valid range for the VPI is 0 to 255. The valid range for the VCI is 32 to 65535. 0 to 31 is reserved for local management of ATM traffic. PPPoA Point-to-Point Protocol over ATM Adaptation Layer 5 (AAL5) (PPPoA) provides access control and billing functionality in a manner similar to dial-up services using PPP. The router encapsulates the PPP session based on RFC1483 and sends it through ATM PVC to the ISPs DSLAM. PPPoE Point-to-Point Protocol over Ethernet provides access control and billing functionality in a manner similar to dial-up services using PPP. The router bridges a PPP session over Ethernet (PPP over Ethernet, RFC 2516) from your computer to an ATM Permanent Virtual Circuit (PVC) that connects to the ADSL Access Concentrator, where the PPP session terminates. Single PVC can support any number of PPP sessions from your LAN.

The modem can be configured to act as a bridging device between your LAN and your ISP. Bridges are devices that enable 2 or more networks to communicate as if they are 2 segments of the same physical LAN. Please set the Connection type.
Encapsulation Select your encapsulation type from the dropdown list.
There are the IP settings of the LAN Interface for the device. These settings may be referred to as Private settings. You may change the LAN IP address if needed. The LAN IP address is provided to your internal network and cannot be seen on the Internet.

Router Local IP

IP Address Enter the IP address of your ADSL router in dotted decimal notation, for example, 10.0.0.2 (default setting). IP Subnet Mask Your ADSL router will automatically calculate the subnet mask based on the IP address that you assign. Unless you are implementing sub netting, use the subnet mask computed by the ADSL router. Dynamic Route Select the Dynamic Route from RIP1, RIP2-B, and RIP2-M. Please refer to Internet Dynamic Route. The only difference is the interface. Multicast IGMP (Internet Group Multicast Protocol) is a session-layer protocol used to establish membership in a multicast group. Please refer to Internet Multicast. The only difference is the interface.
The DHCP Server gives out IP addresses when a device is booting up and request an IP to be logged on to the network. It must be set as a DHCP client to obtain the IP address automatically. By default, the DHCP Server is enabled. The DHCP address pool contains the range of the IP address that will automatically be assigned to the client on the network. Disabled DHCP server is Disabled Enabled DHCP server is Enabled Relay router acts as a relay to different computer/device.

Disabled

Enabled
Starting IP Address Enter the starting IP address you wish to use as the DHCP server's IP assignment. IP Pool Count Enter the maximum user pool size you wish to allow. Lease Time Enter the amount of time you wish to lease out a given IP address. DNS Relay Select the DNS relay option you wish to use from the dropdown list. Primary DNS Enter the primary DNS server IP address you wish to use. For user discovered DNS only. Secondary DNS Enter the secondary DNS server IP address you wish to use. For user discovered DNS only.

A DHCP relay is a computer that forwards DHCP data between computers that request IP addresses and the DHCP server that assigns the addresses. Each of the devices interfaces can be configured as a DHCP relay. If it is enable, the DHCP requests from local PCs will forward to the DHCP server runs on WAN side. To have this function working properly, please run on router mode only, disable the DHCP server on the LAN port, and make sure the routing table has the correct routing entry.
DHCP Server IP for Relay Agent The DHCP server IP Address runs on WAN side. 26

Wireless

Wireless LAN
Access Point Activate or deactivate Access Point function of router. SSID The SSID is a unique name to identify the ADSL Router in the Wireless LAN. Wireless Clients associating to the ADSL Router must have the same SSID. Broadcast SSID Select No to hide the SSID such that a station can not obtain the SSID through passive scanning. Select Yes to make the SSID visible so a station can obtain in the SSID through Passive scanning. Channel ID The range of radio frequencies used by IEEE 802.11b/g wireless devices us called a channel. Authentication Type Appearance of next paragraph depends on this option.
Wired Equivalent Privacy encrypts data frames before transmitting over the wireless network. Select Disable to allow all wireless computers to communicate with the access points without any data encryption. Select 64-bit WEP or 128-bit WEP to use data encryption.
Key #1-4 The WEP keys are used to encrypt data. Both the ADSL Router and the wireless clients must use the same WEP key for data transmission. Enter any 10 (WEP 64bit) or 26 (WEP 128bit) hexadecimal digits (0-9, A-F) preceded by 0x for each key (1-4). The values must be set up exactly the same on the Access Points as they are on the wireless client stations.

WPA-PSK

WPA-PSK (Wi-Fi Protected Access, Pre-Shared Key) Encrypts data frames before transmitting over the wireless network.
Encryption Encryption method TKIP for WPA-PSK, AES for WPA-PSK Pre-Shared Key Key used to encrypt data. Both the ADSL Router and the wireless clients must use the same WPA-PSK Key for data transmission.

Advanced Setting

Beacon Interval The Beacon Interval value indicates the frequency interval of the beacon. Enter a value between 20 and 1000. A beacon is a packet broadcast by the Router to synchronize the wireless network. RTS/CTS The RTS (Request To Send) threshold (number of bytes) for enabling RTS/CTS handshake. Data with its frame size larger than this value will perform the RTS/CTS handshake. Set this attribute to be larger than the maximum MSDU (MAC Service Data Unit) size TURNS OFF the RTS/CTS handshake. Set this attribute to ZERO TURNS ON the RTS/CTS handshake. Enter a value between 0 and 2432. Fragmentation Threshold The threshold (number of bytes) for the fragmentation boundary for directed messages. It is the maximum data fragment size that can be sent. Enter a value between 256 and 2432. DTIM This value is between 1 and 255, indicates the interval of the Delivery Traffic Indication Message (DTIM). 802.11 b/g Wireless standard used in this wireless network. 28

Cerberus ADSL Wi-Fi Lite propagated to other hosts through RIP broadcasts. If you choose No, this route is kept private and is not included in the RIP broadcasts. When you are done making changes, click on SAVE to save your changes, DELETE to delete the rule with the parameters you set, BACK to return to the previous screen or CANCEL to exit without saving.

What NAT Does

NAT changes the source IP address in a packet received from a subscriber (the inside local address) to another (the inside global address) before forwarding the packet to the WAN side. When the response comes back, NAT translates the destination address (the inside global address) back to the inside local address before forwarding it to the original inside host. Note that the IP address (either local or global) of an outside host is never changed. The global IP addresses for the inside hosts can be either static or dynamically assigned by the ISP. You may also designate servers, such as a Web server and a telnet server, on your local network and make them accessible to the outside world. With no servers defined, your router filters out all incoming inquiries, thus preventing intruders from probing your network. For more information on IP address translation, refer to RFC 1631, The IP Network Address Translator (NAT). Inside/outside indicates where a host is located relative to the router. The computers hosts of your LAN are inside, while the Web servers on the Internet are outside. Global/local indicates the IP address of a host in a packet as the packet traverses a router. The local address refers to the IP address of a host when the packet is in the local network, while the global address refers to the IP address of the host when the same packet is traveling in the WAN side. Note that inside/outside refers to the location of a host, while global/local refers to the IP address of a host used in a packet. Thus, an inside local address (ILA) is the IP address of an inside host of a packet when the packet is still in the local network, while an inside global address (IGA) is the IP address of the same inside host when the packet is on the WAN side. The following table summarizes this information.

How NAT Works

Each packet has two addresses a source address and a destination address. For outgoing packets, the ILA is the source address on the LAN, and the IGA is the source address on the WAN. For incoming packets, the ILA is the destination address on the LAN, and the IGA is the destination address on the WAN. NAT maps private (local) IP addresses to globally unique ones required for communication with hosts on other networks. It replaces the original IP source address (and TCP or UDP source port numbers for Many-to-One and Manyto-Many Overload NAT mapping) in each packet and then forwards it to the Internet. The ROUTER keeps track of the original addresses and port numbers so incoming reply packets can have their original values restored.

DMZ setting for Option selected in Number of IPs field in main NAT window. DMZ Toggle the DMZ function Enabled or Disabled. DMZ Host IP Address Enter the specified IP Address for DMZ host on the LAN side When you are done making changes, click on SAVE to save your changes or on BACK to return to the previous screen.

Virtual Server

The Virtual Server is the server or server(s) behind NAT (on the LAN), for example, Web server or FTP server, that you can make visible to the outside world even though NAT makes your whole inside network appear as a single machine to the outside world.
Virtual Server for - selected in Number of IPs field in main NAT window. Rule Index The Virtual server rule index for this VC. You can specify up to 10 rules. All the VCs with single IP will use the same Virtual Server rules. Start Port Number / End Port Number Enter the specific Start and End Port number you want to forward. If it is one port only, you can enter the End port number the same as Start port number. For example, set the FTP Virtual server, you can set the start and end port number to 21. Local IP Address Enter the IP Address for the Virtual Server in LAN side. Virtual Server Listing This is a listing of all virtual servers your have set. When you are done making changes, click on SAVE to save your changes, DELETE to delete the rule with the parameters you set, BACK to return to the previous screen or CANCEL to exit without saving.

IP Address Mapping

The IP Address Mapping is for those VCs that with multiple IPs. The IP Address Mapping rule is per-VC based. (only for Multiple IPs VCs).
Address Mapping Rule PVC to set. Rule Index The Virtual server rule index for this VC. You can specify up to 16 rules. All the VCs with single IP will use the same Virtual Server rules. Rule Type There are 4 types of One-to-One, Many-to-One, Many-to-Many Overload and Many-to-Many No-Overload. Local Start IP / Local End IP Enter the local IP address you plan to map to. Local Start IP is the starting local IP address & Local End IP is the ending local IP address. If the rule is for all local IPs, then the Start IP is 0.0.0.0 and the End IP is 255.255.255.255. Public Start IP / Public End IP Enter the Public IP Address you want to do NAT. Public Start IP is the starting Public IP Address and Public End IP is the ending Public IP Address. If you have a Dynamic IP, enter 0.0.0.0 as the Public Start IP. When you are done making changes, click on SAVE to save your changes, DELETE to delete the rule with the parameters you set, BACK to return to the previous screen or CANCEL to exit without saving.

Select this option to set ADSL Mode and ADSL Type information.
ADSL Mode Select which mode your ADSL connection uses from the dropdown list. The option has Auto Sync-up, ADSL2+, ADSL2, G.DMT, T1.413, G.LITE. ADSL Type Select the ADSL type you use from the dropdown list: ANNEX A, ANNEX I, ANNEX A/L, ANNEX M, ANNEX A/I/J/L/M. When you are done making changes, click on SAVE to save your changes.

Access Management Tab

Go to Access Management ACL to enable remote management. Access Control Listing (ACL) is a management tool that acts as a filter for incoming or outgoing packets, based on application. You may use telnet or Web to remotely manage the ADSL Router. User just needs to enable Telnet or Web and give it an IP address that wants to access the ADSL Router. The default IP 0.0.0.0 allows any client to use this service to remotely manage the ADSL Router.
ACL There has Activated & Deactivated option. The default setting is Deactivated which means all IP can access via router. If you choose Activated, you only can access via router by listed IP addresses. ACL Rule Index Index number from 1 and up to 16. Active Once you choose Yes then you can access the IP via router. Application Each of these labels denotes a service that you may use to remotely manage the Router. Choices are Web, FTP, Telnet, SNMP, Ping, ALL. Interface Select the access interface. Choices are WAN, LAN and Both. UWAGA! You must set one ACL index to access your router via LAN interface. If you dont, your router cannot access other listed IP Address. (Refer to Index 1). Remember! Once you active your ACL function, you only can access via router by listed Secure IP Address. When you are done making changes, click on SAVE to save your changes, DELETE to delete the rule with the parameters you set or CANCEL to exit without saving.

IP Filter

The Router provides extensive firewall protection by restricting connection parameters to limit the risk of intrusion and defending against a wide array of common hacker attackers. Go to Access Management IP Filtering to set different IP filter rules of a given protocol (TCP, UDP, or ICMP) and a specific direction (incoming, outgoing, or both) to filter the packets. IP Filter is a more complex filtering tool, based more on IP and custom rules. Each of the indices can hold six rules, and each interface can have four associated indices, allowing 24 rules per interface. If all six rules in an index are Next rules, the data will be sent to the next index for filtering.

Dynamic DNS Choose the option for Activated or Deactivated DDNS. Service Provider The default Dynamic DNS service provider is www.dyndns.org. My Host Name Type the domain name assigned to your ADSL by your Dynamic DNS provider. E-mail Address Type your e-mail address. Username Type your user name. Password Type the password assigned to you. Wildcard support Select Yes or No to turn on DYNDNS Wildcard. Enabling the wildcard feature for your host causes *.yourhost.dyndns.org to be aliased to the same IP address as yourhost.dyndns.org. This feature is useful if you want to be able to use, for example, www.yourhost.dyndns.org and still reach your hostname. Click SAVE to save your changes. 41

Maintenance Tab

Administration
There is only one account that can access Web-Management interface-Administration. Admin has read/write access privilege. In this web page, you can set new password for admin.
New Password Type the new password in this field. Confirm Password Type the new password again in this field. Click SAVE to save your changes. Note: If you ever forget the password to log in, you may press the DEFAULT button up to 6 second to restore the factory default settings. The Factory Default Settings for User Name & Password are admin & trendchip.

Time Zone

The system time is the time used by the device for scheduling services. You can manually set the time or connect to a NTP (Network Time Protocol) server. If an NTP server is set, you will only need to set the time zone. If you manually set the time, you may also set Daylight Saving dates and the system time will automatically adjust on those dates.

NTP Server automatically

Current Date/Time This field displays an updated Date and Time when you reenter this menu. Time Zone Choose the Time Zone of your location. This will set the time difference between your time zone and Greenwich Mean Time (GMT). Daylight Saving Choose Enabled or Disabled to use daylight savings time. NTP Server Address Type the IP address or domain name of your timeserver. Check with your ISP/network administrator if you are unsure of this information. Click on SAVE to save your changes or on CANCEL to exit without saving.

PCs Clock

Router will synchronize its clock with computer. Click on SAVE to save your changes or on CANCEL to exit without saving.

Manually

Date Enter current date. Time Enter current time. Click on SAVE to save your changes or on CANCEL to exit without saving.

Statistics

The ADSL Router keeps statistic of traffic that passes through it. You are able to view the amount of packets that passes through the Router on both the WAN port & the LAN port. The traffic counter will reset if the device is rebooted. You can select Ethernet/ADSL to view the statistics report of LAN/WAN.

Ethernet

The Ethernet screen gives you information on how much data your router has transmitted and received across the Ethernet connection.
Click on REFRESH to update the screen.
The ADSL screen gives you information about how much data your router has transmitted or received across the ADSL connection.

Help Tab

Routers online help.

Troubleshooting

If the router is not function properly, first check this session for simple troubleshooting before contacting your Internet service provider (ISP) for support.
Using LEDs to Diagnose Problems
The LEDs are useful aides for finding possible problem causes.

Power LED

The PWR LED on the front panel does not light up.: 1. Make sure that the power adaptor is connected to the router and plugged in to an appropriate power source. Use only the supplied power adaptor; 2. Check that the router and the power source are both turned on and the router is receiving sufficient power; 3. Turn the router off and on; 4. If the error persists, you may have a hardware problem. In this case, you should contact your vendor.

LAN LED

The LAN LED on the front panel does not light up.: 1. Check the Ethernet cable connections between your router and the computer or hub; 2. Check for faulty Ethernet cables; 3. Make sure your computers Ethernet card is working properly; 4. If these steps fail to correct the problem, contact your local distributor for assistance.

ADSL LED

The ADSL LED on the front panel does not light up: 1. Check the telephone wire and connections between the router ADSL port and the wall jack; 2. Make sure that the telephone company has checked your phone line and set it up for ADSL service; 3. Reset your ADSL line to reinitialize your link to the DSLAM; 4. If these steps fail to correct the problem, contact your local distributor for assistance.
Problems with the Web Interface
I cannot access the web Interface: 1. Make sure you are using the correct IP address of the router. Check the IP address of the router; 2. Make sure that there is not a console session running; 3. Check that you have enabled web service access. If you have configured a secured client IP address, your computers IP address must match it. Refer to the chapter on remote management for details; 51

Installation and Users Manual
PENTAGRAM Cerberus Wi-Fi Lite (P 6381-0)
The latest versions of manual, drivers and applications are available on www.pentagram.eu 2007-06-28
NOTE! Any information and technical data are subject to change without prior notification and/or indication in this manual. 2007 PENTAGRAM All rights reserved; copying and reproduction is strictly forbidden.
Cerberus Wi-Fi Lite (P6381-0)
INTRODUCTION.... 5 FEATURES.... 5 PACKAGE CONTENTS... 5 PRODUCT OVERVIEW.... 6 IMPORTANT NOTES... 6 FRONT PANEL.... 6 BACK PANEL... 7 DEFAULT SETTINGS... 7 RESETTING ROUTER... 8 CONNECTING CERBERUS TO COMPUTER.. 8 CONFIGURE TCP/IP.... 8 CONFIGURE ROUTER VIA WEB BROWSER.. 13 LOGIN.... 13 NAVIGATION... 14 SETUP WIZARD... 15 OPERATION MODE... 24 LAN INTERFACE SETUP... 25 WAN INTERFACE SETUP... 26 WIRELESS.... 28 FIREWALL.... 40 VPN SETTINGS.... 45 ADVANCED... 50 MANAGEMENT.... 53 EVENT LOG.... 62 TROUBLESHOOTING.... 63 USING LEDS TO DIAGNOSE PROBLEMS.. 63 PROBLEMS WITH THE WEB INTERFACE.. 63 PROBLEMS WITH THE LOGIN USERNAME AND PASSWORD.. 64 PROBLEMS WITH LAN INTERFACE.. 64 PROBLEMS WITH THE INTERNET ACCESS.. 64

Introduction

Thank you for choosing the Cerberus Wi-Fi Lite (P6381-0). With the Wireless-G Router, you can share one Internet connection among multiple computers and extend wireless connectivity to mobile users easily and securely. With its compact design, the Wireless-G Router is easy to set up and configure with the embedded web-based configuration screens.

Features

IEEE 802.11g and 802.11b Wireless LAN Access. Data and network security with wireless 64-bit and 128-bit WEP data encryption. Wi-Fi WPA and WPA2 wireless security. Firewall features to protect network with: IP, MAC, Port and URL filtering. NAT with Port Forwarding/Redirection and DMZ. Wireless access control by MAC addresses. WDS to extend wireless coverage. VPN IPSec & Pass-through.

Package Contents

1. 2. 3. 4. 5. 6. PENTAGRAM Cerberus Wi-Fi Lite (P6381-0) Power adapter 9 V, 0,8 A Ethernet cable (RJ-45) Telephone cable (RJ-11) CD Quick Installation Guide

Product Overview

Important Notes
Do not use the router in high humidity or high temperatures. Do not use the same power source for the router as other equipment. Do not open or repair the case yourself. If the router is too hot, turn off the power immediately and have it repaired at a qualified service center. Avoid using this product and all accessories outdoors. Place the router on a stable surface. Only use the power adapter that comes with the package. Using a different voltage rating power adaptor may damage the router.

Front Panel

LED PWR WLAN

Color Green Green

Green WAN ACT/LINK/SPEED (1-4) Yellow
Action Off Steady light Off Steady light Blinking light Off Steady light Blinking light Off Steady light Blinking light
Description No power is supplied to the device Connected to an AC power supply Access point is disabled Access point is enabled Transmitting/Receiving data The WAN port is not connected The WAN port is connected Transmitting/Receiving data No Ethernet connection Connected to an Ethernet port Transmitting/Receiving data

Back Panel

Label 1-4 (RJ-45) WAN (RJ-45) RESET PWR
Used for. Connecting to computers/devices using the Ethernet cable Connecting to a cable/DSL modem using the Ethernet cable Resetting the device. Connecting with supplied power adapter (9V 0,8A)

Default Settings

Before changing configuration familiarize yourself with these default settings. IP Address Subnet Mask SSID DHCP Server DHCP Server IP Address Pool IP Address Lease Time User Name Password 192.168.1.254 255. 255. 255.0 Wireless-G Router Enabled 100 IP addresses from 192.168.1.seconds (24 hours) root 1234
It is recommended to change default password as soon as possible. If you ever forget the password to log in, you may need to reset router to restore the factory default settings. This procedure is described on the next page.

Resetting router

Turn router on and wait about 2 minutes for router initialization. Hold the RESET button until the LEDs all turn Off, turn On and then turn Off. The router performs configuration factory reset and the router reboots. You can then access the router from the web GUI.
Connecting Cerberus to Computer.
Cerberus can be connected to computer via Ethernet or WLAN:

Setup Wizard: Time Zone Settings
Configure NTP (Network Time Protocol) in the first Setup Wizard screen. NTP allows the Wireless-G Router to automatically update system date and time from a time server.
Enable NTP client update Select this option to set the Wireless-G Router as an NTP client to automatically update the system date and time from a time server on the network. Then set the fields below. Clear this check box to disable this feature. In this case, logs will not show the correct system time. Time Zone Select Select the time zone of the geographical location in which the Wireless-G Router is installed. NTP Server Select a pre-defined time server. Cancel Click Cancel to start configuring the Setup Wizard again. <<Back Click <<Back to discard the changes and go back to the previous screen. Next>> Click Next>> to continue to the next screen.
Setup Wizard: LAN Interface Setup
Configure the IP address and subnet mask of the LAN interface on the Wireless-G Router in the second Setup Wizard screen.
IP Address This field displays the routers current LAN IP address, which is used to access WebGUI. To change the setting, specify a new IP address for the LAN interface. Enter the IP address in dotted decimal notation. For example, 192.168.1.254. Subnet Mask This field displays the current subnet mask. To change, enter a new subnet mask in dotted decimal notation. For example, 255.255.255.0. Cancel Click Cancel to start configuring the Setup Wizard again. <<Back Click <<Back to discard the changes and go back to the previous screen. Next>> Click Next>> to continue to the next screen.
Setup Wizard: WAN Interface Setup
Configure Internet access settings in the third Setup Wizard screen. This screen varies depending on the connection type you select. Configure the fields in this screen with the information provided by your ISP.
WAN Interface Setup: DHCP Client
If your ISP does not give you any IP address and/or user name and password information, select DHCP Client in the WAN Access Type field.
WAN Access Setup: Static IP
If your ISP provide you with a static WAN IP address without user name or password information, select Static IP in the WAN Access Setup field. Set the network information with the information provided by your ISP.
IP Address Enter the WAN IP address (in dotted decimal notation) as provided by your ISP. For example. 10.10.10.1. Subnet Mask Enter the subnet mask (in dotted decimal notation) for the WAN IP address. For example. 255.255.255.0. Default Gateway Enter the IP address of the default gateway device. DNS A DNS (Domain Name System) server keeps mappings of IP addresses and domain names. Thus you dont have to enter an IP address to access a web site/device. Enter the IP address of a DNS server in dotted decimal notation. For example, 192.168.1.10. Cancel Click Cancel to start configuring the Setup Wizard again. <<Back Click <<Back to discard the changes and go back to the previous screen. Next>> Click Next>> to continue to the next screen.

Cerberus Wi-Fi Lite (P6381-0) Note: If you have changed the LAN IP address, you must use the new IP address to access the WebGUI again.

Testing Your Connection

You have completed the wizard screens. To test your Internet connection, open a web browser on any connected computer and enter any web site address (such as http://www.pentagram.eu).

Operation Mode

Gateway In this mode, the device is supposed to connect to internet via ADSL/Cable Modem. The NAT is enabled and PCs in four LAN ports share the same IP to ISP through WAN port. The connection type can be setup in WAN page by using PPPOE, DHCP client, PPTP client or static IP. Wireless ISP In this mode, all Ethernet ports are bridged together and the wireless client will connect to ISP access point. The NAT is enabled and PCs in Ethernet ports share the same IP to ISP through wireless LAN. You must set the wireless to client mode first and connect to the ISP AP in Site-Survey page. The connection type can be setup in WAN page by using PPPOE, DHCP client, PPTP client or static IP. Apply Changes Click Apply Changes to save the changes. The Wireless-G Router will reboot to make the changes take effect. Reset Click Reset to undo the changes.

LAN Interface Setup

The LAN (Local Area Network) is the network connected to a LAN port on the Wireless-G Router. To configure LAN interface settings, click LAN Settings in the navigation panel.
IP Address This field displays the routers current LAN IP address, which is used to access WebGUI. To change the setting, specify a new IP address for the LAN interface. Enter the IP address in dotted decimal notation. For example, 192.168.1.254. Note: When you change the LAN IP address, this also changes the DHCP client pool settings in the DHCP Settings screen. If DHCP server is enabled, restart your computer or network adapter to obtain an IP address from the Wireless-G Router again. To access the WebGUI again, enter the new LAN IP address. Subnet Mask This field displays the current subnet mask. To change, enter a new subnet mask in dotted decimal notation. For example. 255.255.255.0. Default Gateway Enter the IP address of the default gateway device. 802.1d Spanning Tree IEEE 802.1d spanning tree protocol detects and eliminates network loops. A network loop may create duplicate broadcast packets that reduce network performance. Select Enabled to activate this feature. Clone MAC Address You can set the Wireless-G Router to use the same MAC address on all outgoing packets through the LAN interface. Thus the LAN network appears as a single device to the external network. This increases the security level. Enter a computers MAC address in six pairs of hexadecimal notation. For example, 00a0f45a0010. Apply Changes Click Apply Changes to save the changes. The Wireless-G Router will reboot to make the changes take effect. Reset Click Reset to undo the changes. Help Click Help to display on-line help information in a pop-up screen.

Host Name Some ISP require a host name to get a DHCP address
New fields on the PPPoE connection screen:
Service Name A PPPoE service name is either an ISP name or a class of service that is configured on the PPPoE server. Connection Type There are three connection types continuous, connect on demand and manual. Continuous the connection to the ISP is always connected. Connect On Demand the connection to the ISP is initialized only when an application is active to connect the Internet. Manual the connection to the ISP is set manually. You can click the Connect or Disconnect button any time. Idle Time Active only when Connect On Demand is selected. This is the time it takes for the router to disconnect from the ISP if no access request is received.
New fields on the PPTP connection screen:
Request MPPE Encryption MPPE is Microsoft Point-To-Point Encryption, and is described in RFC3078. You will need to enable it if your PPTP Server requires it.

Wireless

Wireless: Wireless Basic Settings
Click Wireless > Wireless Basic Settings. Configure basic wireless settings in this screen.
Disable Wireless LAN Interface Select this option to deactivate wireless capability on the Wireless-G Router. No wireless connection is allowed. Band If your wireless network contains only IEEE 802.11b devices, select 802.1 B. If your wireless network contains only IEEE 802.11g devices, select 802.1 G. If your wireless network contains both IEEE 802.11b and IEEE 802.11g devices, select 802.1 B/G. Mode In addition to setting the Wireless-G Router as an AP (access point) bridging the wireless and wired networks, you can also set the Wireless-G Router to other operating modes. The Client mode allows you the use the Wireless-G Router as a wireless adapter for a computer. This allows the computer to connect to a wireless network. To wirelessly bridge two wired networks, use the WDS mode. Select AP + WDS mode to set the Wireless-G Router to wireless bridge two networks and work as an access point at the same time. Note: If you set the Wireless-G Router in WDS modes, make sure you activate the spanning tree protocol to avoid network loops. Network Type This field is applicable when you select Client in the Mode field. Select Infrastructure to allow a computer to connect to a wireless network via an access point. Select Ad-hoc to allow a compute to connect to another wireless-enable computer. Site Survey This button is applicable when you select Client in the Mode field and Infrastructure in the Network Type field. Click Site Survey to open a screen displaying a list of available wireless networks/devices within transmission range. You can set the Wireless-G Router to connect to a wireless network/device. SSID An SSID uniquely identifies a wireless network. All devices in a wireless network must use the same SSID to communicate with each other. Enter the name of a wireless network to which the computer connects. 28

Cerberus Wi-Fi Lite (P6381-0) Regulation Domain Select the name of your regulation domain. Channel Number A channel is the operating frequency in which a wireless device transmits data. The number of channels you can select varies depending on the regulation domain you select. Select a channel number the Wireless-G Router is to use for wireless communication. To reduce interference, select a channel number that is further away from what the nearest wireless device/network uses. For example, if the nearest wireless device/network is using channel 6, set the Wireless-G Router to use channel 11. Associated Clients Click Show Active Clients to display a screen showing the list of wireless clients that are currently connected to the Wireless-G Router. Enable MAC Cloning (Single Ethernet Client) You can set the Wireless-G Router to use the same MAC address on all outgoing packets through the WLAN interface. Thus the wireless network appears as a single Ethernet device to the external network. This increases the security level. Enter a computers MAC address in six pairs of hexadecimal notation. For example, 00a0f45a0010. Enable Universal Repeater Mode When you enable this universal repeater function, the Wireless-G Router will extend the wireless distance to connect another wireless router or AP. SSID of Extended Interface Input the Parent SSID, when you select the Universal Repeater Mode. Apply Changes Click Apply Changes to save the changes. The Wireless-G Router will reboot to make the changes take effect. Reset Click Reset to undo the changes. Help Click Help to display on-line help information in a pop-up screen.
Wireless Basic Settings: Site Survey
When you set the Wireless-G Router to work in wireless client mode, you can view a list of available wireless networks/devices in the Site Survey screen. Use this screen to establish a wireless connection to a device/network.
SSID This field displays the name of a wireless network/device. BSSID This field displays for Infrastructure mode. This field displays the name of a wireless network. Channel This field displays the wireless channel number the wireless network/device uses. Type This field displays the wireless operating type (Infrastructure or Ad-hoc). 29
Cerberus Wi-Fi Lite (P6381-0) Encrypt This field displays whether security is activated on the wireless network/device. Note: If communication to a wireless network is encrypted, you must first configure the same wireless security settings and then connect to that wireless network. Signal This field displays the signal strength to the wireless network/device. Refresh Click Refresh to update this screen. Connect Click Connect to establish a connection to the select wireless network. Help Click Help to display on-line help information in a pop-up screen.

Wireless Basic Settings: Show Active Clients
When you set the Wireless-G Router to work in access point (AP) mode, you can view a list of connected wireless clients in the Active Wireless Client Table screen.
MAC Address This field displays the MAC address of a connected wireless client. Tx Packet This field displays the number of packets transmitted to this wireless device. Rx Packet This field displays the number of packets received from this wireless device. Tx Rate (Mbps) This field displays the transmission rate to this wireless device. Power Saving The power saving feature allows a computer to stop transmitting through the wireless adapter during sleep mode. This allows the computer (especially a notebook) to save energy. This field displays whether this feature is activated on the wireless client. Expired Time (s) By default, the Wireless-G Router disconnects a wireless client after 300 seconds of inactivity (no beacon or data transmission). This field displays the time that remains before the Wireless-G Router disconnects the wireless connection to the wireless client. The Wireless-G Router resets this timer back to 300 when a beacon or data packet is received. Refresh Click Refresh to update this screen. Close Click Close to close this screen.
Wireless: Wireless Advanced Settings
Click Wireless > Advanced Wireless Settings to display the configuration screen. The default wireless settings in this screen work in most wireless network environment.
Authentication Type IEEE 802.11b defines a basic authentication security using WEP (Wireless Equivalent Protocol) keys. Select Open System if you dont want to use a WEP key for authentication. Select Share Key to set the Wireless-G Router and the peer wireless devices to authenticate each other with a WEP key. Select Auto to allow both open or shared authentication. Note: The peer wireless device must also set to use the same authentication type. Fragmentation Threshold Specify the maximum packet size allowed before the Wireless-G Router fragments data. If there are many error packets on the network, slightly increase the threshold. Setting the threshold too low decreases network performance. Always make a small change to the default settings. RTS Threshold The Wireless-G Router will send a Request To Send (RTS) packet to a sending host. When an acknowledgement is received, the Wireless-G Router sends a Clear To Send (CTS) packets to that host to allow data transmission. RTS/CTS eliminates the hidden node problem where two hosts are within range of each other but does not know each others presence. If the number of packets is lower than the RTS threshold, this feature is not activated. If you are experiencing inconsistent data flow on the network, slightly reduce this number. Beacon Interval A beacon packet is broadcast by the Wireless-G Router to synchronize the wireless network. The beacon interval allows a wireless client in power saving mode to know when to wake up and detect if theres packet waiting to be received. Specify the time period between beacon broadcasts. Data Rate Select a transmission rate the Wireless-G Router uses to send data. Select Auto to allow the Wireless-G Router to use the maximum transmission rate possible. Note: If you specify a transmission rate here, make sure the peer wireless devices must also use the same rate for wireless communication. Wireless network coverage Select an option to set the wireless coverage range. 31

Firewall

Firewall: IP Filtering
Use the IP Filtering screen to limit Internet access on computers based on the IP addresses and protocol types. This is useful to restrict Internet access usage and providing network security. Click Firewall > IP Filtering to display the configuration screen as shown.
Enable IP Filtering Select this option to activate this feature. Local IP Address Enter the IP address of a computer on which you want to restrict access. For example, 0023f6378a1. Protocol Select a protocol type for the application. Choices are UDP, TCP or Both. Comment Enter a description for this IP filter. Apply Changes Click Apply Changes to save the changes. The Wireless-G Router will reboot to make the changes take effect. Reset Click Reset to undo the changes. Current Filter Table This table displays the current IP filter settings on the Wireless-G Router. Local IP Address This field displays the IP address of the computer to which this IP filter applies. Comment This field displays the description for this IP filter. Select Select this option to delete the IP filter. Delete Selected Click Delete Selected to delete the selected IP filter(s). When you click this button, a warning screen displays. Click OK to continue. Delete All Click Delete All to remove all IP filter(s). When you click this button, a warning screen displays. Click OK to continue. Reset Click Reset to clear the Select check box(es). Help Click Help to display on-line help information in a pop-up screen.
Example: Restricting Internet Access on a Computer
This following example sets the Wireless-G Router to block Internet access from the computer with an IP address of 192.168.1.120.

Firewall: Port Filtering

The Port Filtering feature allows you to restrict Internet access based on the application protocol and port number(s). You can control Internet access usage (for example, block peerto-peer applications) and increase network security. Click Firewall > Port Filtering to display the configuration screen as shown.
Enable Port Filtering Select this option to activate this feature. Port Range Specify the service port number range in the fields provided. To specify one port number, enter the same service port number in both fields. Protocol Select a protocol type for the application. Choices are UDP, TCP or Both. Comment Enter a description for this port filtering rule. Apply Changes Click Apply Changes to save the changes. The Wireless-G Router will reboot to make the changes take effect. Reset Click Reset to undo the changes. Current Filter Table This table displays the current port filter settings on the Wireless-G Router. 41

The following example blocks Internet access on a computer with a MAC address of 00:02:3F:63:78:A1.

Firewall: URL Filtering

URL Filtering allows you to restrict access based on the web site address. Click Firewall > URL Filtering to display the configuration screen.
Enable URL Filtering Select this option to activate this feature. URL Address Enter the web site address to which you want to restrict access. For example, http://xxx.com. Apply Changes Click Apply Changes to save the changes. The Wireless-G Router will reboot to make the changes take effect. Reset Click Reset to undo the changes. Current Filter Table This table displays the current MAC filter settings on the Wireless-G Router. URL Address This field displays the address of the web site to which this filter applies. Select Select this option to delete the MAC filter. Delete Selected Click Delete Selected to delete the selected MAC filter(s). When you click this button, a warning screen displays. Click OK to continue. Delete All Click Delete All to remove all MAC filter(s). When you click this button, a warning screen displays. Click OK to continue. Reset Click Reset to clear the Select check box(es). Help Click Help to display on-line help information in a pop-up screen.

VPN Settings

A VPN (Virtual Private Network) allows you to set up a secure connection over the Internet to a remote location without the cost of a leased line. With VPN, data is encrypted before sending over the Internet to the remote site. This technique of secure communication is known as tunneling. The Wireless-G Router supports IPSec (Internet Protocol Security) VPN. IPSec VPN secures data transferred over the IP layer. In order to establish VPN tunnels, you must set the same VPN rule and security settings on the Wireless-G Router and the remote VPN gateway.

VPN Settings: VPN Setup

You can enable the VPN feature and configure general VPN settings in the VPN Setup screen. Click VPN Settings > VPN Setup to display the configuration screen.
Enable IPSec VPN Select this option to activate this feature. Enable NAT Traversal Select this option to set up VPN connection over NAT-enabled devices. Generate RSA Key Click Generate RSA Key to set the Wireless-G Router to automatically create a new RSA key for VPN communication. Show RSA Public Key Click Show RSA Public Key to display the public RSA key in a separate screen. Current VPN Connection Table This tables the current VPN tunnels configured on the Wireless-G Router. WAN IP This field displays the WAN IP address of the Wireless-G Router. # This field displays the index number. Name This field displays the descriptive name for the VPN tunnel. Active This field indicates whether the VPN tunnel is enabled or not. Local Address This field displays the IP address and subnet mask of the local network/device. 45

Cerberus Wi-Fi Lite (P6381-0) Remote Address This field displays the IP address and subnet mask of the remote VPN location. Remote Gateway This field displays the IP address of the remote VPN gateway. Status This field displays whether this VPN tunnel is up (Connected) or not (Disconnected). Edit Click Edit to configure the selected VPN tunnel. Delete Click Delete to remove the selected VPN tunnel. Refresh Click Refresh to update this screen. Help Click Help to display on-line help information in a pop-up screen.

Configuring a VPN Tunnel

To configure a VPN tunnel, select an entry in the Current VPN Connection Table list and click Edit.
Enable Tunnel 1 Select this option to activate this VPN rule. Connection Name Enter a descriptive name for identification purposes. Auth Type Specify an authentication type. Choices are PSK (Pre-Shared Key) and RSA (an authentication method that requires a digital certificate). Local Site Select whether to allow one local host or any computer in a network to initiate a VPN connection to the remote location. Local IP Address/ Network Enter the IP address for the local host/network in dotted decimal notation. For example, 192.168.1.10. Local Subnet Mask Enter the subnet mask for the local host/network. For example, 255.255.255.0. Remote Site Specify the destination of the outgoing VPN traffic. 46
Cerberus Wi-Fi Lite (P6381-0) Remote Secure Gateway Enter the IP address of the remote VPN gateway with which the Wireless-G Router sets up a VPN connection. Remote IP Address/ Network Enter the destination IP address of the remote host/network. For example, 192.168.1.10. Remote Subnet Mask Enter the subnet mask for the remote host/network. For example, 255.255.255.0. Local/Peer ID Configure the fields below to set the ID type and content to identify the local and remote VPN endpoints. Local ID Type Select the ID type the Wireless-G Router uses. Choices are IP, DNS or Email. Local ID Specify the ID to identify the Wireless-G Router. If you select IP in the Local ID Type field, the Wireless-G Router uses the IP address you specify in the Local IP Address/Network as the local ID. If you select DNS in the Local ID Type field, enter a domain name. If you select Email in the Local ID Type field, enter an email address. Remote ID Type Select the ID type the remote VPN endpoint uses. Choices are IP, DNS or Email. Remote ID Specify the ID to identify the remote VPN gateway. If you select IP in the Remote ID Type field, the Wireless-G Router uses the IP address you specify in the Remote IP Address/Network as the peer ID. If you select DNS in the Remote ID Type field, enter a domain name. If you select Email in the Remote ID Type field, enter an email address.

Generating RSA Key

In addition to using a pre-shared key for security, you can set the Wireless-G Router to automatically create a new RSA key for VPN communication. In the VPN Setup screen, click the Generate RSA Key button. Note: This process may take up to 2 minutes. Do NOT turn off the Wireless-G Router. After the RSA key is generated, a screen display as shown. Click OK to return to the main VPN Setup screen.
To display the public RSA key on the Wireless-G Router, click Show RSA Public Key button in the VPN Setup screen.

Advanced

Advanced: Port Forwarding
Use the Port Forwarding screen to forward service requests to the computer(s) behind the Wireless-G Router. This allows you to set up web servers, FTP servers or special applications that require Internet access (such as video conferencing or online gaming). Click Advanced > Port Forwarding to display the configuration screen as shown.
Enable Port Forwarding Select this option to activate this feature. IP Address Enter the IP address of the computer to which the service requests are forwarded. For example, 192.168.1.100. Note: You must set the computer to use a static (or fixed) IP address. Protocol Select a protocol type for the application. Choices are UDP, TCP or Both. Port Range Specify the service port number range in the fields provided. To specify one port number, enter the same service port number in both fields. Comment Enter a description for this application. Apply Changes Click Apply Changes to save the changes. The Wireless-G Router will reboot to make the changes take effect. Reset Click Reset to undo the changes. Current Port Forwarding Table This table displays the current port forwarding settings on the Wireless-G Router. Local IP Address This field displays the IP address of the computer to which to forward the specified service requests. Protocol This field displays the protocol type used for the application. Port Range This field displays a port number or a range of port numbers the Wireless-G Router forwards. Comment This field displays the description for the setting. Select Select this option to delete the port forwarding rule. Delete Selected Click Delete Selected to delete the selected port forwarding rule(s). When you click this button, a warning screen displays. Click OK to continue. Delete All Click Delete All to remove all port forwarding rule(s). When you click this button, a warning screen displays. Click OK to continue. Reset Click Reset to clear the Select check box(es). 50
Cerberus Wi-Fi Lite (P6381-0) Help Click Help to display on-line help information in a pop-up screen.

Management

Management: Status
View current device status in the Wireless-G Router Status screen. Click Management > Status.

System

Uptime This field displays the time that elapsed since the Wireless-G Router last reboots. Firmware Version This field displays the current firmware version number.

Wireless Configuration

Mode This field displays the wireless operating mode on the Wireless-G Router. Band This field displays the wireless protocol the Wireless-G Router uses. SSID This field displays the unique name for the wireless network. Channel Number This field displays the operating frequency the Wireless-G Router uses. Encryption This field displays whether data encryption is activated for the wireless interface. BSSID This field displays the ID (or MAC address) of the wireless interface. Associated Clients This field displays the number of wireless computers currently connected to the Wireless-G Router.

TCP/IP Configuration

Attained IP Protocol This field displays the IP addressing type on the LAN interface. IP Address This field displays the LAN IP address. Subnet Mask This field displays the subnet mask associated with the IP address above. 53
Cerberus Wi-Fi Lite (P6381-0) Default Gateway This field displays the IP address of the gateway device. DHCP Server This field displays whether DHCP server is activated on the Wireless-G Router. MAC Address This field displays MAC address of the LAN Interface.

WAN Configuration

Attained IP Protocol This field displays the IP addressing type on the WAN interface. IP Address This field displays the WAN IP address. Subnet Mask This field displays the subnet mask associated with the IP address above. Default Gateway This field displays the IP address of the gateway device. MAC Address This field displays MAC address of the WAN Interface. Help Click Help to display on-line help information in a pop-up screen.
Management: DHCP Settings

Management: Save/Restore Settings
Use the Save/Restore Settings screen to back up the device settings, restore configuration or reset the Wireless-G Router back to the factory default settings.
Save/Restore Settings: Save Current Configuration
You can back up the device configuration information to a file on your computer. This is recommended after you have complete settings on the Wireless-G Router and that it is fully operable for your network. Follow the steps below to back up a copy of the device configuration. 1. In the WebGUI, click Management > Save/Restore Settings. 2. Click Save. 3. A File Download screen displays as shown. Click Save.
A Save as screen displays. Specify the location and name for the file. Click Save to start the configuration backup process.
After the configuration backup process is complete, a Download complete message displays.
Save/Restore Settings: Restore Configuration
You can use the Save/Restore Settings screen to restore the device settings to a previous backup configuration. Note: Restoring settings erases all current configuration on the Wireless-G Router. Do NOT turn off the device during the file transfer process. Doing so may render your device useless. 1. In the WebGUI, click Management > Save/Restore Settings. 2. In the Load Settings from File field, specify the location and file name of a previously backed up file. Click Browse. to locate it. 3. A Choose file screen displays. Select a backup configuration file and click Open.
Click Upload to start the file transfer process. After the process is successful, the screen displays as shown. Click OK.
The Wireless-G Router automatically restarts to make the changes take effect. Wait until the reboot process is finished before accessing the device again.
Save/Restore Settings: Reset
Resetting the device erases all custom settings. 1. To reset the Wireless-G Router back to the factory default settings, click Reset in the Save/Restore Settings screen. 2. A warning screen displays. Click OK.
The Wireless-G Router automatically restarts to make the changes take effect. Wait until the reboot process is finished before accessing the device again. 60