- DL manuals
- XAVi
- Gateway
- AR396
- User Manual
XAVi AR396 User Manual
Summary of AR396
Page 1
I user manual ar396 adsl2+ gateway with 4-port ethernet switch 802.11b/g wireless ap issue 1.0 31 july 2009.
Page 2
Ar396 user’s guide ii xavi technologies corporation tel: +886-2-2995-7953 9f, no. 129, hsing te road, sanchung city, taipei county 241, taiwan copyright © 2009, xavi technologies corporation information in this manual is subject to change without notice. No part of this manual may be reproduced or t...
Page 3
Ar396 user’s guide iii t t a a b b l l e e o o f f c c o o n n t t e e n n t t s s 1 introduction ................................................................................................. 1 features ................................................................................................
Page 4
Ar396 user’s guide iv dmz ............................................................................................................................................. 26 security ...........................................................................................................................
Page 5
Ar396 user’s guide v password ..................................................................................................................................... 60 update software .................................................................................................................60 s...
Page 6
I federal communication commission interference statement this equipment has been tested and found to comply with the limits for a class b digital device, pursuant to part 15 of the fcc rules. These limits are designed to provide reasonable protection against harmful interference in a residential in...
Page 7: Introduction
Ar396 user’s guide 1 1 introduction congratulations on becoming the owner of the ar396 gateway. You will now be able to access the internet using your high-speed connection. The ar396is a gateway integrating adsl2+, 4 ethernet ports switch and 802.11g wireless interfaces into one device which provid...
Page 8
Ar396 user’s guide 2 device requirements in order to use the device, you must have the following: high speed broadband service instructions from your isp on what type of internet access you will be using, and the ip addresses needed to set up access one or more computers, each containing an ethernet...
Page 9: Getting to Know The Device
Ar396 user’s guide 3 2 getting to know the device parts check in addition to this document, your package should arrive containing the following: the device (ar396) ethernet cable standard phone line cable power adapter figure 1: package contents ar396 device rj-45 cable rj-11 cable power adapter.
Page 10
Ar396 user’s guide 4 front panel the front panel of this device will be described here which cover all front panel definitions of other models. Figure 2: front panel and leds connector and led definitions from left to right: label color function power green or red off : no power on (green) : power o...
Page 11
Ar396 user’s guide 5 rear panel the rear panel of this device will be described here which cover all rear panel definitions of other models. Figure 3: rear panel connections connector definition: label function phone connects to phone set line connects to the adsl line lan1 ~ lan4 connects the devic...
Page 12: Connecting Your Device
Ar396 user’s guide 6 3 connecting your device this chapter provides basic instructions for connecting the device to a computer or lan and to the internet. In addition to configuring the device, you need to configure the internet properties of your computer(s). For more details, see the following sec...
Page 13
Ar396 user’s guide 7 step 1. Connect the wan port to adsl network connect the wan port to the dsl network which has the high speed internet connection. Step 2. Connect the ethernet cable connect up to four single ethernet computers or to a hub/switch directly to the device via ethernet cable(s). Not...
Page 14
Ar396 user’s guide 8 4 getting start with the web pages the device includes a series of web pages that provide an interface to the software installed on the device. It enables you to configure the device settings to meet the needs of your network. You can access it through a web browser on a pc conn...
Page 15
Ar396 user’s guide 9 advanced setup: provides information about the current configuration of various system features with options to change the configuration. It includes the sub menus wan, lan, ethernet mode, nat, security, parental control, routing, dns, dsl, interface group, ipsec and certificate...
Page 16
Ar396 user’s guide 10 management: provides the administration utilities. It includes the sub menus, settings, system log, snmp agent, tr-069 client, internet time, access control, update software, and save/reboot. Testing your setup once you have connected your hardware and configured your pcs, any ...
Page 17: Device Information
Ar396 user’s guide 11 5 device information the device information web page menu includes the following submenus: summary wan statistics route arp dhcp summary the summary page of the device shows the following information, firmware version, product name, serial number, hardware version, software ver...
Page 18
Ar396 user’s guide 12 igmp enabled or disabled, qos enabled or disabled, wan port state, dsl link status, and ip address of wan port. Figure 7: wan port information statistic the statistic page of the device shows the following information, interfaces, data transmitting (received and transmitted dir...
Page 19
Ar396 user’s guide 13 figure 10: device atm statistic information figure 11: device adsl statistic information.
Page 20
Ar396 user’s guide 14 route the route page of the device shows the route table. It contains destination ip address, gateway, subnet mask, flag, metric, service and interface. Figure 12: device route table information arp the arp page of the device shows the arp table mapping the ip address and relat...
Page 21: Advanced Setup
Ar396 user’s guide 15 6 advanced setup the advance setup menu includes the sub menus wan, lan, ethernet mode, nat, security, parental control, quality of service, routing, dns, dsl, interface group, ipsec and certificate. Wan lan ethernet mode nat security parental control quality of service routing...
Page 22
Ar396 user’s guide 16 figure 16: wan port - atm pvc configuration to configure atm pvc on the wan interface: enter vpi/vci values check to enable the vlan mux that allows multiple protocols in the same pvc and then enter the 802.11q vlan id valued from 0 to 4095 select the service category from the ...
Page 23
Ar396 user’s guide 17 click next to configure the connection type figure 18: wan connection type configuration global settings: check the wan protocol from ppp over atm (pppoa), ppp over ethernet (pppoe), mac encapsulation routing (mer), ip over atm (ipoa) and briding. Select the encapsulation mode ...
Page 24
Ar396 user’s guide 18 to configure the pppoa or pppoe settings: enter the user’s ppp username and password enter the service provider name if any select the authentication method (auto, pap, chap, or mschap) used during negotiation, default is auto. Enter the ppp mtu (maximum transmission unit) size...
Page 25
Ar396 user’s guide 19 select the public ip of nat from interface ip address or manual ip address. If it is manual ip address, enter the associated ip address. Check to enable firewall feature check to enable igmp multicast to avoid the multicast packet flooding to other lan ports where do not need t...
Page 26
Ar396 user’s guide 20 mac encapsulation routing (mer) figure 22: wan connection, mer configuration to configure the ip over ethernet settings: select “obtain an ip address automatically” or “use the following (fixed) ip address” and then also enter the wan ip address and wan subnet mask. Select “obt...
Page 27
Ar396 user’s guide 21 ip over atm (ipoa) figure 23: wan connection, mer configuration to configure the ip over ethernet settings: enter the wan ip address and wan subnet mask. Select “use the following default gateway” and then also enter the gateway ip address and use wan interface where packets wi...
Page 28
Ar396 user’s guide 22 to configure the bridging settings: check “enable bridge service” to enable bridge service enter the service name for this bridging interface. Click next the wan setup summary page shows all of parameters. Click save if correct and click back to restart the configuration again....
Page 29
Ar396 user’s guide 23 related information. Therefore, multicast packets will be generated to the related lan ports only to avoid the packet flooding on all of lan ports. Select one of two modes, standard mode or blocking mode. Select to enable or disable dhcp server. If it is enabled, please enter t...
Page 30
Ar396 user’s guide 24 nat (network access translation) the nat feature provides the basic firewall feature to avoid hacker attacks from remote site. There are three more setting pages including virtual server, port trigger, and dmz to provide specified service for remote users. Virtual server virtua...
Page 31
Ar396 user’s guide 25 global setting select a service from the predefined list or enter the name of custom server enter the server ip address located in the lan to provide the service to remote party enter the start external port # and end external port # that open to remote to access the service se...
Page 32
Ar396 user’s guide 26 blank. Select the open protocol click save/apply figure 31: add a rule of port triggering dmz a dmz (de-militarized zone) host is a computer on your network that can be accessed from the internet. The de-militarized zone (dmz) is for forwarding ip packets from the remote partie...
Page 33
Ar396 user’s guide 27 enter the dmz host ip address click save/apply security the security feature provides two more setting pages including mac filtering and parental control. Ip address filter the device can block the packet in outgoing and incoming directions. By default, all outgoing ip packets ...
Page 34
Ar396 user’s guide 28 global setting enter the filter name select the protocol from the selection list. Enter the source ip address and subnet mask (range of ip addresses) of packet enter the one port or multi ports (port range) enter the destination ip address and subnet mask (range of ip addresses...
Page 35
Ar396 user’s guide 29 global setting enter the filter name select the protocol from the selection list. Enter the source ip address and subnet mask (range of ip addresses) of packet enter the one port or multi ports (port range) enter the destination ip address and subnet mask (range of ip addresses...
Page 36
Ar396 user’s guide 30 global setting enter the username select the browser’s mac address or other mac address to enter the specific pc mac address. Check those days you want to block above pc to surf internet. Enter the start blocking time and end blocking time click save/apply. Quality of service t...
Page 37
Ar396 user’s guide 31 queue configuration you could configure a maximum 16 qos queues to provide different service levels. Figure 40: quality of service queue configuration click add to add a class of qualify of service. The screen allows to configure a qos queue entry and assign it to a specific ne...
Page 38
Ar396 user’s guide 32 qos classification you need to define one or more classes of data traffic and set the priority for each of classes. A maximum 32 entries can be configured. Figure 42: quality of service classification setup click add to add a class of qualify of service. Check remove and click ...
Page 39
Ar396 user’s guide 33 the screen creates a traffic class rule to classify the traffic, assign queue priority which defines the precedence and type of service. A rule consists of a class name and at least one condition below. All of the specified conditions in this classification rule must be satisfi...
Page 40
Ar396 user’s guide 34 global setting check enable automatic assigned default gateway checkbox, this router will accept the first received default gateway assignment from one of the pppoa, pppoe or static ip/dhcp interface. If the checkbox is not checked, enter the static default gateway and/or a wan...
Page 41
Ar396 user’s guide 35 policy routing figure 47: policy routing configuration click add to add the static route path. Figure 48: add policy route configuration global setting enter the policy name select the source interface (lan1 to 4 and wireless)from the list select the protocol (tcp/udp, tcp, ip ...
Page 42
Ar396 user’s guide 36 rip figure 49: rip configuration global setting check to enable or disable global rip mode select the desired rip version and operation, followed by placing a check in the 'enabled' checkbox for the interface. Click save to save the configuration the rip can not be configured i...
Page 43
Ar396 user’s guide 37 dynamic dns the dynamic dns feature allows you to bind the dynamic assigned wan ip address into a specified domain name. You could pass this domain name to friends to access your service in your site instead of informing them every times if wan ip address is changed. . Figure 5...
Page 44
Ar396 user’s guide 38 dsl the dsl feature provides basic and advance configuration to set the dsl parameters. Please contact technician for details before changing any parameters. Figure 53: dsl basic configuration global setting check to select the dsl modulation modes. Select the dsl phone line pa...
Page 45
Ar396 user’s guide 39 click add to add a new interface group setting. Check remove and click save/apply button to remove the specified entry. Click edit button to edit current settings. To create (add) a new interface group: figure 55: create new interface group configuration global setting enter th...
Page 46
Ar396 user’s guide 40 ipsec the page provides ipsec vpn configuration to establish a vpn tunnel. Figure 56: ipsec vpn configuration check the enable box to enable this ipsec tunnel. Click add new connection to create a ipsec vpn profile. Click edit button to edit the current settings, click remove b...
Page 47
Ar396 user’s guide 41 select the authentication method: pre-shared key or certificate (x.509) enter the pre-shared key if chooses pre-shared key as the authentication method select to enable or disable the perfect forward secrecy. Click show advanced settings for more settings. Figure 58: ipsec vpn ...
Page 48
Ar396 user’s guide 42 click create certificate request to generate a certificate. Check import certificate to get a certificate from file. Create new certificate request: figure 60: crate new certificate request global setting enter certificate name, common name, organization name, and state/provinc...
Page 49
Ar396 user’s guide 43 import certificate: figure 62: import certificate global setting enter certificate name enter the certificate and private key click apply trusted ca certificate ca (certificate authority) is used by you to verify peer’s certificate. It can be imported only. Figure 63: trusted c...
Page 50
Ar396 user’s guide 44 figure 64: import ca certificate global setting enter certificate name. Enter the certificate. Click apply..
Page 51: Wireless Setup
Ar396 user’s guide 45 7 wireless setup the wireless setup web page menu comprises: basic security mac filter wireless bridge advanced station information basic the device provides wireless connection to wireless clients. This page allows you to enable the wireless service, hide the network from acti...
Page 52
Ar396 user’s guide 46 the bssid is the mac address of the device input to set the maximum wireless clients the device wants to provide service. Click save/apply to save the configuration security the device provides wireless connection with security including authentication method and data encryptio...
Page 53
Ar396 user’s guide 47 the same as network authentication is open and wep encryption is enabled. If the network authentication is 802.1x, enter the ip address and port number of radius server, radius key, enable or disable wep encryption. If wep encryption is enabled, select the encryption strength w...
Page 54
Ar396 user’s guide 48 figure 70: wireless setting – wpa-psk security if the network authentication is wpa2, select enable or disable for wpa2 pre-authentication, enter value of network re-auth interval, enter value of wpa group rekey interval, the ip address and port number of radius server, radius ...
Page 55
Ar396 user’s guide 49 current key index and enter the key and four keys when necessary. Figure 73: wireless setting – mixed wpa2/wpa security if the network authentication is mixed wpa2/wpa-psk (pre-shared key), enter the wpa pre-shared key and enter wpa group rekey interval, wpa encryption method (...
Page 56
Ar396 user’s guide 50 mac filter with this configuration, you could allow or deny wireless to access the device by wireless mac address filtering feature. It is disabled as default. Figure 75: wireless mac filter configuration global setting select the mac restrict mode from one of disable (no mac f...
Page 57
Ar396 user’s guide 51 global setting set the ap mode as access point or wireless bridge when the ap mode is set to wireless bridge, the wireless restrict determine where it can communicate with all other wireless bridges (set bridge restrict is disabled) or just the specified mac addresses of remote...
Page 58
Ar396 user’s guide 52 set the maximum associated wireless client set xpress technology enabled or disabled. Set 54g mode to 54g auto, 54g performance, 802.11b, 54g lrs (limited rate support). Set 54g protection to auto if there are 802.11g and 802.11b coexisting in the wireless network. Set afterbur...
Page 59: Diagnostic
Ar396 user’s guide 53 8 diagnostic the diagnostic web page provides the connection check in physical layer and upper layer. The result is helpful to figure out the problem if you have problem to surf internet. Diagnostic this page will show up the result of diagnostic in physical layer like wan port...
Page 60: Management
Ar396 user’s guide 54 9 management the management web page menu comprises: settings system log snmp agent tr-069 client internet time access control update software save/reboot settings this page allows you to backup the current configuration of the device, update the configuration, and restore defa...
Page 61
Ar396 user’s guide 55 restore default figure 83: restore default settings click restore default settings to restore the factory default settings. System log this page allows you to view system log and also configure system log that way you want to see. Figure 84: management configuration – system lo...
Page 62
Ar396 user’s guide 56 global setting select to enable log function or not select log level from the list select display level from the list select mode from the list click save/apply to save the configuration. Snmp agent this page allows you to use a management application to retrieve statistics and...
Page 63
Ar396 user’s guide 57 figure 87: management configuration – firmware upgrade global setting select to enable or disable to send inform packet to acs. Enter the inform interval number of seconds. The inform packet will be sent to acs periodically. Enter the acs url to reach acs enter the acs user nam...
Page 64
Ar396 user’s guide 58 internet time this page allows you to sync up the real time clock from internet. . Figure 88: internet time configuration global setting check to enable automatically synchronize with internet time servers click save to save your settings access control this submenu provides yo...
Page 65
Ar396 user’s guide 59 • ftp • http • icmp (ping) • snmp • ssh • telnet • tftp click save/apply to save the configuration. Ip address figure 90: management configuration – access control: ip address click to enable or disable access control by ip address. Click add to add ip address. Check remove and...
Page 66
Ar396 user’s guide 60 password there are three levels of access accounts: admin, support, and user. The user name “admin” has unrestricted access to change and view configuration of the device. The user name “support” is used to allow an isp technician to access the device for maintenance and to run...
Page 67
Ar396 user’s guide 61 global setting: first of all, you have to get the updated software (firmware) from isp or manufacture. Click browser to specify the location and filename click update software to start the process. It could take minutes to complete it. Save / reboot this page allows you to save...
Page 68
Ar396 user’s guide 62 appendix a - configuring the network settings to surf internet through the device, you need to configure the network settings of your pc correctly. This appendix provides the guide for a reference. Configuring ethernet (lan) card before you begin by default, the device automati...
Page 69
Ar396 user’s guide 63 click ok to confirm your changes, and then close the control panel. Configuring wireless lan card if your pc is connected to the device through wireless link, you need to configure the network setting of wireless lan card in stead of lan card. The steps to configure the network...
Page 70
Ar396 user’s guide 64 appendix b - troubleshooting during the installing or using the device, you may encounter problem, this appendix provides the solution and instructions to solve the issues. In case, the problem can not be solved, please contact customer support for further support. Troubleshoot...
Page 71
Ar396 user’s guide 65 problem troubleshooting suggestion cannot access the web pages verify the ethernet connection by using ping utility. Command: ping device’s lan ip address (by default 192.168.1.1). If it cannot, check the ethernet cabling. Verify that you are using latest internet explorer or n...
Page 72
Ar396 user’s guide 66 nslookup click ok. A command prompt window is prompted. Enter the domain name like www.Yahoo.Com or www.Microsoft.Com . The associated ip address will be shown as below in this case, you see multiple ip addresses associated with that domain name. It is common for web server. Sy...
Page 73
Ar396 user’s guide 67 appendix c - specification a1. Hardware specifications local interface • four port 10/100baset ethernet switch (4 * rj-45 connectors), ieee 802.3u with mdi/mdix auto-detection • integrated 802.11b/g wlan access point wan adsl line interface • compliant with itu-t g.992.1, g...
Page 74
Ar396 user’s guide 68 protection against ip and mac address spoofing configuration and network management features snmp gets, sets and traps for four groups in mib-ii dhcp client and server for ip management upnp internet gateway device (igd) compliance web for local or remote management http or t...
Page 75
Ar396 user’s guide 69 appendix d - warranties b1. Product warranty xavi technologies warrants that the adsl unit will be free from defects in material and workmanship for a period of twelve (12) months from the date of shipment. Xavi technologies shall incur no liability under this warranty if － the...
Page 76
Ar396 user’s guide 70 appendix e - contact information you can help us serve you better by sending us your comments and feedback. Listed below are the addresses, telephone and fax numbers of our offices. You can also visit us on the world wide web at www.Xavi.Com.Tw for more information. We look for...