Telewell TW-EAV510 V2 User Manual

TW-EAV510 v2 3G/4G/LTE Wireless VPN ADSL2+/Fibre Broadband Router User Manual Copyright © TeleWell Oy

10 Chapter 2: Basic Installation The router can be configured through your web browser. A web browser is included as a standard application in the

100 Examples: Common usage Give outgoing VoIP traffic more priority. The default queue priority is normal, so if you have VoIP users in your loca

101 If you are actively engaged in P2P and are afraid of slowing down internet access for other users within your network, you can then use QoS to

102 Interface: P1-P4. P4 used as EWAN also covered. Type: All LAN when P4 is LAN port; P4 used as EWAN, type WAN and all others LAN. QoS Shaping Rat

103 Virtual Servers In TCP/IP and UDP networks a port is a 16-bit number used to identify which application program (usually a server) incoming con

104 Interface: select from the drop-down menu the interface you want the virtual server(s) to apply. Server Name: select the server name from the

105 Press Apply to conform, and the items will be list in the Virtual Servers Setup table.

106 Remove If you don’t need a specified Server, you can remove it. Check the check box beside the item you want to remove, then press Remove, it w

107 One-to-One NAT One-to-One NAT maps a specific private/local address to a global/public IP address. If user has multiple global/public IP addres

108 Interface: Select from the drop-down menu the interface you want the port triggering rules apply to. Application: Preinstalled applications or

109 Select a Server Name from the drop-down menu, then the port will automatically appear, modify some as you like, or you can just leave it as def

11 IPv4: Select Internet Protocol Version 4 (TCP/IPv4) then click Properties

110 ALG The ALG Controls enable or disable protocols over application layer. Wake On LAN Wake on LAN (WOL, sometimes WoL) is an Ethernet comput

111 VPN A virtual private network (VPN) is a private network that interconnects remote (and often geographically separate) networks through primar

112 IPSec Settings L2TP over IPSec: Select Enable if user wants to use L2TP over IPSec. See L2TPover IPSec Connection Name: A given name for the c

113 entering the pre-shared key into both sides (router or hosts). Local ID Type and Remote ID Type: When the mode of phase 1 is aggressive, Local a

114 Please be noted, it must be enabled on the both sites. Detection Interval: The period cycle for dead peer detection. The interval can be 180~86

115 i MD5: A one-way hashing algorithm that produces a 128−bit hash. i SHA1: A one-way hashing algorithm that produces a 160−bit hash. DH Group: I

116 5 Proposal Method ESP Security Plan Authentication MD5 Encryption 3DES Prefer Forward Security MODP 1024(group2) Pre-shared Key 123456

117 2. Host to LAN Router servers as VPN server, and host should install the IPSec client to connect to head office through IPSec VPN. Item F

118 2 IP Address 192.168.1.0 Head Office network Netmask 255.255.255.0 3 Remote Secure Gateway (Hostanme) 69.121.1.30 IP address of the Branch

119 PPTP Server In PPTP session, users can set the basaic parameters(authentication, encyption, peer address, etc) for PPTP Server, and accounts in

12 In the TCP/IPv4 properties window, select the Obtain an IP address automatically and Obtain DNS Server address automatically radio buttons. Then

120 Name: user-defined name for identification. WAN Interface: Select the exact WAN interface configured for the tunnel. Select Default to use the n

121 Create a PPTP Account “test”. Client Side: In Windows7 click Start > Control Panel> Network and Sharing Center, Click Set up a new c

122 Click Connect to a workplace, and press Next. Select Use my Internet connection (VPN) and press Next.

123 Input Internet address and Destination name for this connection and press Next.

124 Input the account (user name and password) and press Create.

125 Connect to the server

126 Successfully connected. PS: You can also go to Network Connections shown below to check the detail of the connection. Right click “test” icon

127

128 Example: Configuring a LAN-to-LAN PPTP VPN Connection The branch office establishes a PPTP VPN tunnel with head office to connect two private n

129 Then the PPTP Account. Client Side: Branch Office The client user can set up a tunnel connecting to the PPTP server, and can also set the

13 In the TCP/IPv6 properties window, select the Obtain an IPv6 address automatically and Obtain DNS Server address automatically radio buttons. The

130 L2TP Server In L2TP session, users can set the bassic parameters(authentication, encyption, peer address, etc) for L2TP Server, and accounts in

131 Name: user-defined name for identification. L2TP over IPSec: If your L2TP server has used L2TP over IPSec feature, please enable this item. Un

132 i Disable WAN Interface: Select the exact WAN interface configured for the tunnel. Select Default to use the now-working WAN interface for th

133 Server Side: Configuration > VPN > L2TP and Enable the L2TP function, Click Apply. The IPSec for L2TP rule Create a L2TP Account “te

134 Client Side: In Windows7 click Start > Control Panel> Network and Sharing Center, Click Set up a new connection network. Click Connect

135 Select Use my Internet connection (VPN) and press Next. Input Internet address and Destination name for this connection and press Next.

136 Input the account (user name and password) and press Create.

137 Connection created. Press Close. Go to Network Connections shown below to check the detail of the connection. Right click “L2TP_IPSec” icon,

138 Chang the type of VPN to “Layer 2 Tunneling Protocol with IPSec 2TP/IPSec)” and Click Advanced Settings to set the pre-shared (set in IPSec) ke

139 Example: Configuring L2TP LAN-to-LAN VPN Connection The branch office establishes a L2TP VPN tunnel with head office to connect two private

14 connections on the left window panel. Select the Local Area Connection, and right click the icon to select Properties. IPv4: Select Internet

140 Server side: Head Office

141 The above is the commonly setting for L2TP Server, set as you like for authentication and encryption. The settings in Client side should be in

142 GRE Generic Routing Encapsulation (GRE) is a tunneling protocol that can encapsulate a wide variety of network layer protocol packets inside vi

143 Advanced Setup There are sub-items within the System section: Routing, DNS, Static ARP, UPnP, Certificate, Multicast, Management, and Diagnosti

144 Static Route With static route feature, you can control the routing of all the traffic across your network. With each routing rule created, you

145 Click Add to create a policy route. Policy Name: User-defined name. Physical LAN Port: Select the LAN port. Source IP: Enter the Host Sourc

146 Note: RIP can’t be configured on the WAN interface which has NAT enabled (such as PPPoE). Click Apply to apply your settings. DNS DNS, Domain

147 Dynamic DNS The Dynamic DNS function allows you to alias a dynamic IP address to a static hostname, allowing users whose ISP does not assign th

148 2. ipoe_ethO with DDNS: www.hometest1.co m using usemame/password test/test. DNS Proxy DNS proxy is used to forward request and response me

149 Host Name: Type the domain name (host name) for the specific IP. IP Address: Type the IP address bound to the set host name above. Click Add t

15 Click OK again in the Local Area Connection Properties window to apply the new configuration. IPv6: Select Internet Protocol Version 6 (TCP/

150 Installing UPnP in Windows Example Follow the steps below to install the UPnP in Windows Me. Step 1: Click Start and Control Panel. Double-cli

151 Follow the steps below to install the UPnP in Windows XP. Step 1: Click Start and Control Panel. Step 2: Double-click Network Connections. Ste

152 Step 5: In the Networking Services window, select the Universal Plug and Play check box. Step 6: Click OK to go back to the Windows Optional Ne

153 Step 3: In the Internet Connection Properties window, click Settings to see the port mappings that were automatically created. Step 4: You m

154 Step 5: Select Show icon in notification area when connected option and click OK. An icon displays in the system tray Step 6: Double-click on

155 Step 4: An icon describing each UPnP-enabled device shows under Local Network. Step 5: Right-click on the icon of your TeleWell TW-EAV510v2 an

156 Enter the certificate name and insert the certificate. Click Apply to confirm your settings.

157 Multicast Multicast is one of the three network transmission modes, Unicast, Multicast, Broadcast. It is a transmission mode that supports poin

158 Query Response Interval: Enter the response interval time (sec). Last Member Query Interval: Enter the interval time (sec) the multicast router

159 Trap message, is the message automatically sent by the managed device without request to the manager about the emergency events. SNMP Agent:

16 In the TCP/IPv6 properties window, select the Obtain an IPv6 address automatically and Obtain DNS Server address automatically radio buttons. The

160 Inform: select enable to let CPE be authorized to send Inform message to automatically connect to ACS. Inform Interval: Specify the inform int

161 access to IPs. Enable Service: Select to determine which service(s) is (are) allowed for remote access when remote access is enabled. By default

162 For example, user can add a timeslot named “timeslot1” features a period of 9:00-19:00 every weekday. Auto Reboot Auto reboot offers flexi

163 Diagnostics Diagnostics Tools TeleWell TW-EAV510v2 offers diagnostics tools including “Ping” and “Trace route test” tools to check for problem

164 Example: “trace” www.google.com Push Service With push service, the system can send email messages with consumption data and system inform

165 Diagnostics Check the connections, including Ethernet connection, Internet Connection and wireless connection. Click Help link that can lead yo

166 Maintenance Domain (MD) Level: Maintenance Domains (MDs) are management spaces on a network, typically owned and operated by a single entity. MD

167 Chapter 4: Troubleshooting If your router is not functioning properly, please refer to the suggested solutions provided in this chapter. If you

168 Problem with LAN interface Problem Suggested Action Cannot PING any PC on LAN Check the Ethernet LEDs on the front panel. The LED should be on f

169

17 DHCP server for IPv4 - DHCP server is enabled - Start IP Address: 192.168.0.100 - IP pool counts: 100 LAN and WAN Port Addresses The parame

18 Information from your ISP Before configuring this device, you have to check with your ISP (Internet Service Provider) to find out what kind of s

19 Chapter 3: Configuration Configuration via Web Interface Open your web browser; enter the IP address of your router, which by default is 192.16

2 Table of Contents Chapter(1:(Introduction(...

20 Status This Section gives users an easy access to the information about the working router and access to view the current status of the router.

21 Device Information Model Name: Displays the model name. Host Name: Displays the name of the router. System Up-Time: Displays the elapsed time sin

22 Statistics LAN The table shows the statistics of LAN. Note: P4 can be configured as EWAN, and when the device is in EWAN profile, there is no P

23 Interface: Display the connection interface. Description: the description for the connection. Bytes: Display the WAN Received and Transmitted t

24 xDSL Mode: Modulation protocol, including G.dmt, G.lite, T1.413, ADSL2, AnnexL, ADSL2+ and AnnexM. Traffic Type: Transfer mode, here suppor

25 SNR Margin (dB): Show the Signal to Noise Ratio (SNR) margin. Attenuation (dB): This is estimate of average loop attenuation of signal. Output

26 When it is OK, the following test result window will appear. You can view the quality of ADSL connection. Here the connection is OK. Reset: Cli

27 Press View LAN Transmitted button to change the diagram to the statistics from a Received Bytes of view. (Note: means Ethernet port #3, and the

28 3G/LTE Status Status: The current status of the 3G/LTE card. Signal Strength: The signal strength bar indicates current 3G signal strengt

29 Route Destination: The IP address of destination network. Gateway: The IP address of the gateway this route uses. Subnet Mask: The destinati

3 Chapter 1: Introduction Introduction to your Router The TeleWell TW-EAV510V2 is a fibre-ready ADSL2+/VDSL modem, an all-in-one advanced device i

30 DHCP The DHCP Table lists the DHCP lease information for all IP addresses assigned by the DHCP server in the device. Host Name: The Host Name

31 PPTP PPTP Server Name: The PPTP connection name. Enable: Display the connection status with icons. Status: The connection status. Connection T

32 L2TP Client Name: The L2TP connection name. Enable: Display the connection status with icons. Status: The connection status. Connection Type: Rem

33 Security Log Security log displays the message logged about security, like filter messages and some firewall message. You can turn to IP Filteri

34 LAN - Local Area Network A Local Area Network AN) is a shared communication system network where many computers are connected. This type of netw

35 When enabled, you will see two modes: i Standard Mode: In standard mode, multicast traffic will flood to all bridge ports when no client subscri

36 Static IP List The specified IP will be assigned to the corresponding MAC Address listed in the following table when DHCP Server assigns IP Addr

37 The second way is “stateless” configuration. Stateless auto-configuration requires no manual configuration of hosts, minimal (if any) configurati

38 Leased Time (hour): The leased time, similar to leased time in DHCPv4, is a time limit assigned to clients, when expires, the assigned ID will be

39 Stateful: two methods can be adopted. i With only DHCPv6 enabled With this method, the PCs’ addresses are configured the same as in IPv4, that

4 Jumbo frames supported Jumbo frames are Ethernet frames with more than 1500 bytes (standard Ethernet frame) of payload. Conventionally, jumbo fr

40 Group Isolation: If enabled, devices in one group are not able to access those in the other group. Click Add to add groups.

41 Group Name: Type a group name. Grouped WAN Interfaces: Select from the box the WAN interface you want to applied in the group. Grouped LAN Interf

42 Wireless This section provides you ways to configure wireless access. The TW-EAV510v2 supports wireless on the 2.4GHz for users. This part has

43 Wireless: Default setting is set to Enable. If you do not have any wireless devices, check the checkbox again to unselect. Hide SSID: It is funct

44 Note： The WPS feature will also be unavailable when the security setting is not WPA2 or OPEN. So, if you manually set the wireless security setti

45 i 802.1x RADIUS Server IP Address: RADIUS(Remote Authentication Dial In User Service), Enter the IP address of RADIUS authentication server. R

46 WPA/WAPI passphrase: Enter the WPA.WAPI passphrase; you can click here to display to view it. WPA Group ReKey Internal: The period of renewal tim

47 WPA/WAPI Encryption: There are two Algorithms, AES (Advanced Encryption Standard) and TKIP (Temporal Key Integrity Protocol) which help to protec

48 Configure AP as Registrar Add Enrollee with PIN method Select radio button “Enter STA PIN”. Input PIN from Enrollee Station (16837546 in this ex

49 Operate Station to start WPS Adding Enrollee. Launch the wireless client’s WPS utility. Set the Config Mode as Enrollee, press the WPS button on

5 Features - Triple-WAN ports for 3G/4G/LTE, ADSL2+, VDSL2, 100Mb Ethernet WAN (EWAN) for broadband connectivity - 100/10 Mb WAN and LAN - Fibre

50 Configure AP as Enrollee Add Registrar with PIN Method Set AP to “Unconfigured Mode”. Launch the wireless client's WPS utility. Set th

51 MAC Address: enter the MAC address(es). The format of MAC address could be: xx:xx:xx:xx:xx:xx or xx-xx-xx-xx-xx-xx. Click Apply to apply your

52 Remote Bridge MAC Address: Enter the remote bridge MAC addresses. Here up to 4 bridge MAC addresses are supported. i Enabled(Scan): To enable

53 Advanced Here users can set some advanced parameters about wireless. Band: Select frequency band. Here 2.4GHz. Channel: Allows channel selecti

54 to disable this function or auto to enable this function. OBSS Co-Existence: coexistence (or not) between 20 MHZ and 40 MHZ overlapping basic ser

55 MAC Address: The MAC address of the wireless clients. Associated: List all the stations that are associated with the Access Point. If a station i

56 WAN-Wide Area Network A WAN (Wide Area Network) is a computer network that covers a broad geographical area (eg. Internet) that is used to conne

57 A) DSL PPPoE PPPoE (PPP over Ethernet) provides access control in a manner which is similar to dial-up services using PPP. VCI/VPI: Enter the

58 Furthermore, any external host can send a packet to the internal host by sending a packet to the mapped external address. Note: In PPPoE connect

59 Here you can configure WAN Service, if it is OK, you can access the internet. You can go to Status > WAN or Summary to view the WAN connecti

6 Firewall - Built-in NAT Firewall - Stateful Packet Inspection (SPI) - DoS attack prevention - Packet Filtering (v4/v6) - port, source IP addre

60 Fullcone NAT: Enable or disable fullcone NAT. Fullcone is a kind of NAT, in this mode, all requests from the same internal IP address and port a

61 IP over Ethernet VCI/VPI: Enter the VCI/VPI combination from you ISP. Encapsulation Mode: Select the encapsulation mode, LLC/SNAP-BRIDGING, or

62 Obtain DNS: I Use WAN interfaces: Select a desirable WAN interface as the IPv6 DNS server. I Use Static DNS: To specify DNS server manually by

63 VCI/VPI: Enter the VCI/VPI combination from you ISP. Encapsulation Mode: Select the encapsulation mode, LLC/SNAP-BRIDGING, or VC/MUX. Description

64 B) Ethernet Ethernet WAN connection is well known as directly broadband WAN connection. Click Add on WAN Service page to add new Ethernet WAN co

65 send a packet, with source IP address X and source port P, to the internal host only if the internal host had previously sent a packet to IP addr

66 Default Gateway Select default gateway for you connection (IPv4 and IPv6). DNS IPv4 Three ways to set an IPv4 DNS server i Available WAN inte

67 IP over Ethernet Description: User-defined description for the connection, commonly for friendly use. 802.1P Priority: The parameter indicates

68 Obtain an IPv6 address automatically: check whether to enable or disable this feature. WAN IPv6 Address/Prefix Length: Enter the WAN IPv6 Address

69 C) 3G/LTE Select 3G/4G/LTE to configure the route to enjoy the mobility. By default the 3G/4G/LTE interface is on, user can edit the parameters

7 Management - Web-based GUI for remote and local management (IPv4/IPv6) - Firmware upgrades and configuration data upload and download via web-ba

70 they use to connect to a DHCP Server, thus giving you access to the internet i.e. some 3G operators use the APN ‘internet’ for their portal. The

71 DSL This screen allows you to set DSL parameters. DSL knowledge is required to configure these settings. Contact your ISP to make sure that thes

72 SNR Signal-to-noise ratio (often abbreviated SNR or S/N) is a measure used in science and engineering that compares the level of a desired signa

73 Firmware Upgrade Software upgrading lets you experience new and integral functions of your router. Restart device with: i Factory Default Set

74 Click Backup Settings, a window appears, click save , then browse the location where you want to save the backup file. Click Browse and browse t

75 Click Apply to apply your new settings. Mail Alert Mail alert is designed to keep system administrator or other relevant personnel alerted of

76 Port: the port, default is 25. Account Test: Press this button to test the connectivity and feasibility to your sender’s e-mail. Recipient’s Emai

77 USB Storage here refers to network sharing in the network environment, USB devices act as the storage carrier for DLNA, common file sharing. S

78 Username: user-defined name, but simpler and more convenient to remember would be favorable. Password: Set the password. Confirm Password: Rese

79 When accessing the network storage, you can see a folder named “public”, users should have the account to enter, and the account can be set at th

8 Only use the power adapter that comes with the package. Using a different voltage rating power adapter may damage the router. Device Description

80 When successfully accessed, the private folder of each user is established, and user can see from the following picture. The test fold in the

81 Note: Only USB printers are supported Setup of the printer is a 3 step process (for example) Connect the printer to the ’s USB port Enable the

82 Step 2: Click ‘’Add a Printer’’. Step 3: Click “Add a network, wireless or Bluetooth printer

83 Step 4: Click “The printer that I want isn’t listed” Step 5: Select “Select a shared printer by name” Enter http://- LAN-IP:631/printers/print

84 Step 6: Click “Next” to add the printer driver. If your printer is not listed and your printer came with an installation disk, click “Have Disk”

85 Step 8: Click “Next” and you are done You will now be able to see your printer on the Devices and Printers Page DLNA The Digital Living Ne

86 On-board digital media server: Enable to share the device as a DLNA server. Interface: The VLAN group, it is the bound interface for DLNA serve

87 Click Add button to manually add the 6in4 rules. Tunnel Name: User-defined name. Mechanism: Here only 6RD. Associated WAN Interface: The appli

88 Click Add button to manually add the 4in6 rules. Tunnel Name: User-defined tunnel name. Mechanism: It is the 4in6 tunnel operation technolog

89 Click Add button to enter the exact rule setting page. Filter Name: A user-defined rule name. User can select simply from the list box for

9 The Rear Ports Port Meaning 1 Power Switch Power ON / OFF switch. 2 Power Connect the supplied power adapter to this jack. 3 RESET

90 (The rule is active; disable field shows the status of the rule, active or inactive) (Rule Inactive)

91 IP Filtering Incoming Incoming IP Filtering is set by default to block all incoming traffic, but user can set rules to forward the specific inco

92 Time Schedule: Select or set exactly when the rule works. When set to “Always On”, the rule will work all time; and also you can set the precis

93 Protocol type: Select from the drop-down menu the protocol that applies to this rule. Destination /Source MAC Address: Enter the destination/sour

94 Host Label: User-defined name. MAC Address: Enter the MAC address(es) you want to allow or block to access the router and LAN. The format of MA

95 Keywords Filtering: Allow blocking against specific keywords within a particular URL rather than having to specify a complete URL (e.g.to block

96 You can add other keywords like this. The keywords you add will be listed as above. If you want to reedit the keyword, press the Edit radio butt

97 Parental Control Provider Parental Control Provider provides Web content filtering offering safer and more reliable web surfing for users. Pleas

98 IP Version: Select either IPv4 or IPv6 base on need. Application: Assign a name that identifies the new QoS application rule. Select from the li

99 DSCP offers three levels of service, Class Selector (CS), Assured Forwarding (AF) and Expedited Forwarding (EF). AF1, AF2, AF3 and AF4 are four l