Belkin N300 User Manual

User ManualF9K1004v1 8820-01044 Rev. A00HIGH PERFORMANCE WIRELESS N300 VPNROUTER

7BEFORE YOU BEGIN•Rightclickon[LocalAreaConnection]andselect[Properties].

97VPNL2TPNetworkL2TPAuthenticationSelect the desired authentication protocol (PAP, CHAP, MSCHAP_V2). Select MSCHAP_V2 by defaultAccountSelect accounts

98VPNUser SettingThis page display the available users of VPN connection. You can add and delete the VPN available users here. You can enter the user

99VPNYou can use Wizard to create a VPN profile easily. 1. Click Next button to begin the wizard. 2. Enter the VPN policy name then click the Next bu

100VPN3. You can select [IPSec] or [L2TP over IPSec] or [L2TP] in this page then click the Next button to go to the next page. If you select [IPSec]

101VPNb. L2TP over IPSec Enter the username, password and VPN server IP setting. Then click the Next button to go to the next page.Enter the Security

102VPNc. L2TP Enter the username, password and VPN server IP setting. Then click the Next button to go to the next page.4. Enter the shared key for

103VPN5. Setup successful, enable this policy immediately. If you don’t want to enable this policy, you can un-check the box. Then click the Apply bu

104VPN1. Click the Start button and open Control Panel.How to establish an L2TP over IPSec VPN connection on Windows XP2. Click [Network Connections]

105VPN3. Select [Connect to the network at my workplace] then click the Next button.4. Select [Virtual Private Network connection] then click the Ne

106VPN5. Enter the [Company Name] then click the Next button. 6. Select [Do not dial the initial connection] then click the Next button.

8BEFORE YOU BEGIN•Check“ClientforMicrosoftNetworks”,“FileandPrinterSharingforMicrosoftNetworks”,and“InternetProtocol(TCP/IP)isticke

107VPN7. Enter the VPN server IP address then click the Next button. 8. Select [Do not use my smart card] then click the Next button.

108VPN9. Click the Finish button to complete the wizard. 10. Click the Properities button.

109VPN11. In Security, select [Advanced (custom settings)] then click the Settings button.12. Check [Unencrypted password (PAP)] and [Challenge Hand

110VPN13. Click [IPSec Settings] then check [Use pre-shared key for authentication], Enter the Key then click the OK button.14. In Networking, selec

111VPN15. Click the Connect button to connect VPN connection. 16. You can see that the VPN Connection has been established

112VPN1. Click the Start button and open Control Panel. 2. Click [View Network Status and Tasks] then [Set up a new connection or network]How to est

113VPN3. Click [Connect to a workplace] then [Use my Internet connection (VPN)]

114VPN4. Enter the VPN server IP address: [Internet address], [Destination name] and check [Don’t connect now; just set it up so I can connect later]

115VPN6. Click the Close button to close the VPN connection settings.7. Click [Change adapter settings] in Step 2, then select VPN Connection and cl

116VPN8. Change Type of VPN to [Layer 2 Tunneling Protocol with IPSec (L2TP/IPSec)] and check [Unencrypted password (PAP)] in Security.9. Click the

9BEFORE YOU BEGIN•Select“ObtainanIPAddressautomatically”and“ObtainDNSserveraddressautomatically”thenclick[OK].

117VPN10. Double click the VPN Connection then click the Connect button. 11. You can see that the VPN Connection has been established.

118TOOLSThis section allows you to configure certain device system settings.AdminThis page allows you to change the system password and to configure r

119TOOLSTimeThis page allows you to set the system time.TimeTime Setup: Select the method you want to set the time.Time Zone: Select the time zone for

120TOOLSDynamic DNS (DDNS)This free service is very useful when combined with the Virtual Server feature. It allows Internet users to connect to your

121TOOLSDDNS Services work as follows:1. You must register for the service at one of the listed DDNS Service providers.2. After registration, use th

122TOOLSPowerThis page allows you to Enable or Disable the wireless LAN power saving features.

123TOOLSDiagnosisThis page allows you to determine if the WIRELESS ROUTER device has an active Internet connection.DiagnosisAddress to Ping: Enter the

124TOOLSTo perform the Firmware Upgrade:1. Click the Browse button and navigate to the location of the upgrade file.2. Select the upgrade file. Its

125TOOLSBack-upBack-upRestore to factory default: Restores the device to its factory default settings.Backup Settings: Save the current configuration

126TOOLSResetIn some circumstances it may be required to force the device to reboot.

10BEFORE YOU BEGINHardware Installation1. Place the unit in an appropriate location after conducting a site survey.2.PlugoneendoftheEthernetcab

127TECHNICAL SUPPORT, WARRANTY, FCC STATEMENTTechnical SupportUShttp://www.belkin.com/supportUKhttp://www.belkin.com/uk/supportAustraliahttp://www.bel

128TECHNICAL SUPPORT, WARRANTY, FCC STATEMENTBelkin International, Inc., Limited 2-Year Product WarrantyWhat this warranty covers.Belkin International

129TECHNICAL SUPPORT, WARRANTY, FCC STATEMENTHow to get service.To get service for your Belkin product you must take the following steps:1. Contact Be

130TECHNICAL SUPPORT, WARRANTY, FCC STATEMENTHow state law relates to the warranty.THIS WARRANTY CONTAINS THE SOLE WARRANTY OF BELKIN. THERE ARE NO OT

131TECHNICAL SUPPORT, WARRANTY, FCC STATEMENTFCC StatementDECLARATION OF CONFORMITY WITH FCC RULES FOR ELECTROMAGNETIC COMPATIBILITYWe, Belkin Interna

132TECHNICAL SUPPORT, WARRANTY, FCC STATEMENTCanada-Industry Canada (IC)The wireless radio of this device complies with RSS 139 & RSS 210 Industry

© 2012 Belkin International, Inc. All rights reserved. All trade names are registered trademarks of respective manufacturers listed. Safari is a trade

11CONFIGURING YOUR ROUTERThis section will show you how to configure the device using the web-based configuration interface. Please use your wireless

12SETUP WIZARD1. Open a web browser (Internet Explorer/Firefox/Safari) and enter the IP Address http://192.168.2.1Note: If you have changed the defau

13SETUP WIZARD3. You will see this webpage if login is successful. 4. Click Wiza rd to enter the Setup Wizard. Then click Next to begin the wizar

14SETUP WIZARD5. Select the Operation Mode.Please ensure you have the proper cables connected as described in the Hardware Installation section.

15SETUP WIZARDa. The device will search for the correct Internet settings automatically. b. The most appropriate WAN type will be determined and sel

16SETUP WIZARDc. There are many WAN service types available. Please obtain the correct settings from your Internet Service Provider (ISP).

TABLE OF CONTENTSSystem ... 27Status ...27LAN ...

17SETUP WIZARDStatic IP AddressIf your ISP Provider has assigned you a fixed IP address, enter the assigned IP address, Subnet mask, Default Gateway I

18SETUP WIZARDThis will replace the AP Router MAC address to the computer MAC address. The correct MAC address is used to initiate the connection to t

19SETUP WIZARDPPP over EthernetISP requires an account username and password.PPP over EthernetUsername Username assigned to you by the ISPPassword Pas

20SETUP WIZARDPoint-to-Point Tunneling Protocol (PPTP)PPTP is used by some ISPs.

21SETUP WIZARDPPTP WAN Interface SettingsWAN Interface Type Select whether the ISP is set to Static IP or Dynamic IP address.Hostname This is optional

22SETUP WIZARDLayer-2 Tunneling Protocol (L2TP)L2TP is used by some ISPs.

23SETUP WIZARDL2TP WAN Interface SettingsWAN Interface Type Select whether the ISP is set to Static IP or Dynamic IP address.Hostname This is optional

24SETUP WIZARDd. Choose the level of wireless security. Belkin recommends the Highest level of security.Note: 802.11n wireless speeds may not be achi

25SETUP WIZARDe. Check the settings are correct, and then click Reboot to apply the settings.

26VPN WIZARDUsing the VPN Wizard, you can establish VPN connection easily. Please refer to page 99.

TABLE OF CONTENTSFirewall ... 69Enable ...69Advanced .

27SYSTEMStatusThis page will display the status of the device.StatusModel Description of this device.Mode The mode the device is currently in.Uptime T

28SYSTEMWAN SettingsAttain IP Protocol Method used to connect to the Internet.IP address The WAN IP Address of the device.Subnet Mask The WAN Subnet M

29SYSTEMLAN SettingsIP address The LAN IP Address of the device.Subnet Mask The LAN Subnet Mask of the device.DHCP Server Whether the DHCP server is E

30SYSTEMWLAN SettingsChannel The wireless channel in use.ESSIDThe SSID (Network Name) of the wireless network. (up to 4 SSIDs are supported)Security

31SYSTEMLANThis page allows you to modify the device’s LAN settings.

32SYSTEMLAN IPIP address The LAN IP Address of this device.IP Subnet Mask The LAN Subnet Mask of this device.802.1d Spanning Tree When Enabled, the Sp

33SYSTEMDHCP ServerDHCP Server The DHCP Server automatically allocates IP addresses to your LAN device.Lease Time The duration of time that the DHCP s

34SYSTEMDNS ServersFrom ISP The DNS server IP address is assigned from your ISP.User-Defined The DNS server IP address is assigned manually.DNS Relay

35SYSTEMDHCPThis page shows the status of the DHCP server and also allows you to control how the IP addresses are allocated.

36SYSTEMDHCP Client TableIP address The LAN IP address of the client.MAC address The MAC address of the client’s LAN interface.Expiration Time The tim

1INTRODUCTIONPackage Contents•BelkinWirelessN300VPNRouter•PowerAdapter•RJ-45EthernetLANCable•CD-ROMwithUserManualandSetupWizard•Qui

37SYSTEMYou can also manually specify the IP address that will be allocated to a LAN client by associating the IP address with its MAC address.Type th

38SYSTEMScheduleThis page allows you to setup the schedule times that the Firewall and Power Saving features will be activated / deactivated. Click A

39SYSTEMScheduleSchedule Description Assign a name to the schedule.Service The service provides for the schedule.Days Define the Days to activate or d

40SYSTEMLogThis page displays the system log of the device. When powered down or rebooted, the log will be cleared.LogSave Save the log to a file.Clea

41SYSTEMLanguageThis page allows you to change the Language of the User Interface.

42INTERNETThe Internet section allows you to manually set the WAN type connection and its related settings.StatusThis page shows the current status of

43INTERNETDynamic IP AddressThe IP Address is allocated automatically. However some ISP’s will also recognize the MAC address and will reject connecti

44INTERNETStatic IP AddressIf your ISP Provider has assigned you a fixed IP address, enter the assigned IP address, Subnet mask, Default Gateway IP ad

45INTERNETPPP over EthernetISP requires an account username and password

46INTERNETPPP over Ethernet (PPPoE)Username Username assigned to you by the ISPPassword Password for this username.Service You can assign a name for t

2INTRODUCTIONIntroductionF9K1004isaWireless11NGigabitVPNRouterwith2attachableantennasthatdeliversupto6xfasterspeedsand3xextended

47INTERNETPoint-to-Point Tunneling Protocol (PPTP)PPTP is used by some ISPs.

48INTERNETPoint-to-Point Tunneling Protocol (PPTP)WAN Interface Type Select whether the ISP is set to Static IP or will allocate a Dynamic IP address.

49INTERNETLayer-2 Tunneling Protocol (L2TP)L2TP is used by some ISPs..

50INTERNETLayer-2 Tunneling Protocol (L2TP)WAN Interface Type Select whether the ISP is set to Static IP or will allocate a Dynamic IP address.Hostnam

51WIRELESSThe Wireless section allows you to configure the Wireless settings.BasicThis page shows the current status of the device’s Wireless settings

52WIRELESSBasicRadio Enable or Disable the device’s wireless signal.Mode Select between Access Point or Wireless Distribution System (WDS) modes.BandS

53WIRELESSWireless Distribution System (WDS)Use WDS to connect Access Point wirelessly. Doing so extends a wired infrastructure to locations where cab

54WIRELESSAdvancedThis page allows you to configure wireless advance settings. It is recommended the default settings are used unless the user has exp

55WIRELESSAdvancedFragment ThresholdSpecifies the size of the packet per fragment. This function can reduce the chance of packet collision. However wh

56WIRELESSSecurityThis page allows you to set the wireless security settings.

3INTRODUCTIONLED Lights Icon DescriptionWireless LANColor–BlueLigh tswhenWirel esssignal isactivated.Internet WANColor–BlueLAN LANColor–Bl

57WIRELESSSecuritySSID Selection Select the SSID that the security settings will apply to.Broadcast SSID If Disabled, the device will not broadcast th

58WIRELESSIEEE 802.1x is an authentication protocol. Every user must use a valid account to login to this Access Point before accessing the wireless L

59WIRELESSWEP Encryption:WEP EncryptionAuthentication Type Please ensure that your wireless clients use the same authentication type.Key typeASCII: re

60WIRELESSWPA RADIUS Encryption:WPA RADIUS EncryptionWPA typeSelect the WPA encryption you would like. Please ensure that your wireless clients use th

61WIRELESSWPA Pre-Shared Key Encryption:WPA Pre-Shared Key EncryptionAuthentication Type Please ensure that your wireless clients use the same authent

62WIRELESSFilterThis page allows you to create filters to control which wireless clients can connect to this device by only allowing the MAC addresses

63WIRELESSWireless FilterEnable Wireless Access ControlCheck the box to Enable Wireless Access Control.When Enabled, only wireless clients on the Filt

64WIRELESSWi-Fi Protected Setup (WPS)WPS feature is follows the Wi-Fi Alliance WPS standard and it eases the setup of security-enabled Wi-Fi networks

65WIRELESSWi-Fi Protected Setup (WPS)WPS Check to Enable the WPS feature.WPS Button Check to Enable the WPS push button.Wi-Fi Protected Setup Informat

66WIRELESSInitializing WPS FeatureThere are two methods to initialize the WPS feature: Push Button and Pin Code methods.1. WPS Push Button MethodPush

4BEFORE YOU BEGINBefore you BeginThis section will guide you through the installation process. Placement of the F9K1004 is very important to avoid poo

67WIRELESSClient ListThis page shows the wireless clients that are connected to the WIRELESS ROUTER device.

68WIRELESSPolicyThis page allows you to configure the access policies for each SSID (wireless network).PolicyWAN Connection Allow wireless clients on

69FIREWALLEnableThis page allows you to Enable / Disable the Firewall features.If Enabled Firewall service, the Denial of Service (DoS) and SPI (State

70FIREWALLDMZIf enabled this feature, allows the DMZ computer on your LAN to be exposed to all users on the Internet.• Thisallowsalmostanyapplica

71FIREWALLMAC FilterYou can choose whether to Deny or Allow those computers listed in theMACFilteringtableaccesstotheInternet.MAC FilterEnable

72FIREWALLIP FilterYou can choose whether to Deny or Allow computers with IP Addresses listed from accessing certain Ports.This can be used to control

73FIREWALLURL FilterYou can deny access to certain websites by blocking keywords in the URLwebaddress.Forexample,“gamer”hasbeenaddedtotheURL

74ADVANCEDThe Advanced section allows you to configure the Advanced settings of the router.Network Address Translation (NAT)This page allows you to En

75ADVANCEDPort MappingPort Mapping allows you to redirect a particular range of ports to a computer on your LAN network. This helps you host servers b

76ADVANCEDPort ForwardingPort Forwarding allows you to redirect a particular public port to a computer on your LAN network. This helps you host server

5BEFORE YOU BEGIN•ClickStartbuttonandopenControlPanel.Computer Settings (Windows XP/Windows Vista/Windows 7)Windows XP Windows Vista Windows 7

77ADVANCEDPort TriggerIf you use Internet applications which use non-standard connections or port numbers, you may find that they do not function corr

78ADVANCEDApplication Layer Gateway (ALG)Certain applications may require the use of the ALG feature to function correctly. If you use any of the appl

79ADVANCEDUniversal Plug and Play (UPnP)The UPnP function allows automatic discovery and configuration of UPnP enabled devices on your network. It als

80ADVANCEDQuality of Service (QoS) QoS refers to the capability of a network to provide better service to selected network traffic. This is to ensure

81ADVANCEDPriority Queue MethodBandwidth priority is set to either High or Low. The transmissions in the High queue will be processed first.Unlimited

82ADVANCEDBandwidth Allocation MethodYou can set the maximum amount of bandwidth a certain protocol will use at one time. Or you can set a minimum amo

83ADVANCEDRoutingIf your WIRELESS ROUTER device is connected to a network with different subnets, then this feature will allow the different subnets t

84ADVANCEDFor example, if Client3 wants to send an IP data packet to 192.168.10.2 (Client 2), it will use the above table to determine that it has to

85VPNA Virtual Private Network (VPN) provides a secure connection between two or more computers or protected networks over the public Internet. It pro

86VPNStatusThis page displays the connect status of VPN connection. You can select one of them to connect or disconnect the VPN connection. Note: If c

6BEFORE YOU BEGIN•WindowsXP,click[NetworkConnection]•WindowsVista,click[ViewNetworkStatusandTasks]then[ManageNetworkConnections]•W

87VPNProfile SettingThis page allows you to Enable, Add, Edit and Delete VPN profiles.Profile SettingEnable Check the box to Enable the VPN profile.Ad

88VPNIPSecIPSec (Internet Protocol Security) is a protocol suite for securing Internet Protocol (IP) communications by authenticating and encrypting e

89VPNGeneralName Enter a name for your VPN policy.Connection Type Supports IPSec, L2TP over IPSec and L2TP methods to establish VPN connection.Authent

90VPNSA (Security Association)A Security Association (SA) is the establishment of shared security attributes between two network entities to support s

91VPNSA (Security Association)IKE (Phase 1) ProposalExchangeSelect Main Mode or Aggressive Mode for IKE Phase 1 negotiation. • Main Mode: Select this

92VPNNetworkThis page allows you to configure the VPN server and local/remote subnet.NetworkSecurity Gateway Type Security Gateway Type supports IP Ad

93VPNAdvancedThis page allows you to configure advanced VPN settings.AdvancedNAT TraversalEnabling NAT Traversal allows IPSec traffic from this endpoi

94VPNL2TP over IPSecL2TP over IPSec VPNs enable a business to transport data over the Internet, while still maintaining a high level of security to pr

95VPNL2TPNetworkL2TPAuthenticationSelect the desired authentication protocol (PAP, CHAP, MSCHAP_V2). Select MSCHAP_V2 by defaultAccountSelect accounts

96VPNL2TPL2TP (The Layer 2 Tunnel Protocol) is a tunneling protocol used to support virtual private networks (VPNs). It does not provide any encryptio