User Guide DSL-N12HP 300Mbps Wi-Fi ADSL Modem Router...
Page 2
Product warranty or service will not be extended if: (1) the product is repaired, modified or altered, unless such repair, modification of alteration is authorized in writing by ASUS; or (2) the serial number of the product is defaced or missing.
Table of contents Getting to know your ADSL modem router Welcome! ..................6 Package contents .................6 Your ADSL modem router ............7 Positioning your ADSL modem router .........9 Setup Requirements ..............10 ADSL Modem Router Setup ..........10 Getting started Default settings ................12 IP configuration .................
Page 4
Table of contents 3.2.6 Parental Control ..............55 3.2.7 Routing ...................58 Advanced Setup ................ 63 3.3.1 NAT .....................63 3.3.2 Quality of Service (QoS) ............71 3.3.3 UPnP ..................79 3.3.4 DNS.....................80 3.3.5 DSL .....................85 3.3.6 DNS Proxy ................87 3.3.7 Interface Grouping ...............88 3.3.7 IP Tunnel ...................91 Wireless ..................
Page 5
E2.4 PPP over ATM (PPPoA) ............153 E2.5 IP over ATM (IPoA) .............. 158 Appendix F - WPS OPERATION Add Enrollee with Pin Method ...........162 Add Enrollee with PBC Method ..........163 Appendix G Notices .....................164 ASUS Contact Information ..............178 Networks Global Hotline Information..........179...
Getting to know your ADSL modem router 1.1 Welcome! Thank you for purchasing an ASUS DSL-N12HP Wi-Fi ADSL Modem Router! DSL-N12HP is an 802.11n (300Mbps) Wireless ADSL2+ router comprising four 10/100 Base-T Ethernet ports, a Wi-Fi Protected Setup (WPS)/ Wi-Fi switch button, and is backward compatible with existing 802.11b (11Mbps) and 11g (54bps) equipment.
1.3 Your ADSL modem router DSL-N12HP 300Mbps Wi-Fi ADSL Modem Router Power LED Off: No power. Solid green: Device is ready. Flashing green: Upgrade is in process. Solid red: POST (Power On Self Test) failure (not bootable) or device malfunction.
Page 8
Wi-Fi LED Off: No Wi-Fi signal. Solid green: Wireless system is ready. Flashing green: Transmitting or receiving data via wireless connection. LAN 1~4 LED Off: No power or no physical connection. Solid green: Has physical connection to an Ethernet network. Flashing green: Transmitting or receiving data via wireless connection.
Bluetooth devices, cordless phones, transformers, heavy-duty motors, fluorescent lights, microwave ovens, refrigerators, and other industrial equipment. • Always update to the latest firmware. Visit the ASUS website at http://www.asus.com to get the latest firmware updates. • To ensure the best wireless signal, orient the two detachable antennas using the bundled antenna holder as shown in the drawing below.
100 meters. 1.6 ADSL Modem Router Setup IMPORTANT! • Use a wired connection when setting up your ADSL modem router to avoid possible setup problems. • Before setting up your ASUS ADSL modem router, do the following: • If you are replacing an existing ADSL modem router, disconnect it from your network. Wired connection NOTE: You can use either a straight-through cable or a crossover cable...
Page 11
Wall Power Outlet Power Splitter Wall telephone outlet Phone Computer To set up your ADSL modem router via wired connection: 1. Connect one end of the RJ-11 cable to the ADSL port of your ADSL modem router, and connect the other end to the ADSL port of your splitter.
Getting started 2.1 Default settings Your ASUS Wireless ADSL Modem Router comes with an intuitive web graphical user interface (GUI) that allows you to easily configure its various features through a web browser such as Internet Explorer, Firefox, Safari, or Google Chrome.
2.2 IP configuration DHCP MODE When the DSL-N12HP powers up, the onboard DHCP server will switch on. Basically, the DHCP server issues and reserves IP addresses for LAN devices, such as your PC. To obtain an IP address from the DCHP server, follow the steps provided below.
Page 14
3. To obtain the IPv4 IP settings automatically, tick Obtain an IP address automatically. To obtain the IPv6 IP settings automatically, tick Obtain an IPv6 address automatically. 4. Click OK when done. If you experience difficulty with DHCP mode, you can try static IP mode instead.
Page 15
1. Click Start > Control Panel > Network and Internet > Network and Sharing Center > Manage network connections. 2. Select Internet Protocol Version 4 (TCP/IPv4) or Internet Protocol Version 6 (TCP/IPv6), then click Properties. 3. Change the IP address to the 192.168.1.x (1<x<255) subnet with subnet mask of 255.255.255.0.
NOTE: For details on changing your ADSL modem router's login username and password, refer to section 4.2.4 Access Control. 3. You can now use the Web GUI to configure various settings of your ASUS ADSL modem router. Top command buttons Information...
2.4 Quick Internet Setup (QIS) Wizard with Auto-detection The Quick Internet Setup (QIS) function guides you in quickly setting up your Internet connection. NOTE: When setting the Internet connection for the first time, press the Reset button on your ADSL modem router to reset it to its factory default settings.
Page 18
2. After successfully logging in for the first time, the Device Info page displays. 3. Click the Quick Internet Setup tab on the left side of the screen. 4. Key in the PPP username and PPP password that you obtained from your Internet Service Provider (ISP), assign the network name (SSID) and security key for your wireless connection, select your local time zone from the drop-down menu, and...
5. Click Next to complete the setup and go to the Device Info page. NOTE: Change the router password to prevent unauthorized access to your ASUS wireless router. 2.5 Connecting to your wireless network After setting up your ADSL modem router via QIS, you can connect your computer or other smart devices to your wireless network.
Configuring the General settings 3.1 Device Information You can reach this page by clicking on the Device Info icon located on the left side of the screen. The Device Info Summary screen displays at startup. This screen shows hardware, software, IP settings and other related information.
3.1.1 WAN Click the WAN tab to display the configured PVC(s). Field Description Interface Name of the interface for WAN Description Name of the WAN connection Type Shows the connection type VlanMuxId Shows 802.1Q VLAN ID Info Shows the parameter setting value like, IPv6, IGMP, MLD, NAT, Firewall Status Lists the status of DSL link...
3.1.2 Traffic Statistics This selection provides LAN, WAN, xTM and xDSL statistics. Click the Traffic tab to display the following. Click Reset Statistics to perform a manual update.
LAN Statistics This screen shows data traffic statistics for each LAN interface. Select LAN from the drop-down menu. Field Description Interface LAN interface(s) Bytes Number of Bytes Pkts Number of Packets Received/Transmitted Errs Number of packets with errors Drops Number of dropped packets...
WAN Statistics This screen shows data traffic statistics for each WAN interface. Select WAN from the drop-down menu. Field Description Interface WAN interface(s) Description WAN service label Bytes Number of Bytes Pkts Number of Packets Received/Transmitted Errs Number of packets with errors Drops Number of dropped packets...
xTM Statistics The following figure shows ATM (Asynchronous Transfer Mode)/ PTM (Packet Transfer Mode) statistics. Select xTM from the drop-down menu. Field Description Port Number ATM PORT (0-3) In Octets Number of octets received over the interface Out Octets Number of octets transmitted over the interface In Packets Number of packets received over the interface Out Packets...
Page 26
xDSL Statistics The xDSL Statistics screen displays information corresponding to the xDSL type.
Page 27
Click the Reset Statistics button to refresh this screen. Field Description Mode ADSL2, ADSL2+ Traffic Type Status Lists the status of the DSL link Link Power State Link output power state. phyR Status Shows the status of PhyR™ (Physical Layer Re-Transmission) impulse noise protection Line Coding (Trellis) Trellis On/Off...
Page 28
HEC Errors Total Number of Header Error Checksum errors OCD Errors Total Number of Out-of-Cell Delineation errors LCD Errors Total number of Loss of Cell Delineation Total Cells Total number of ATM cells (including idle + data cells) Data Cells Total number of ATM data cells Bit Errors Total number of bit errors...
Page 29
Click Start to start the test or click Close to cancel the test. After the BER testing is complete, the pop-up window will display as follows. xDSL TONE GRAPH Click Draw Graph on the xDSL Statistics screen and a pop-up window will display the DSL line statistics.
3.1.3 Route Click the Route tab to display the routes that the DSL-N12HP has found. Field Description Destination Destination network or destination host Gateway Next hop IP address Subnet Mask Subnet Mask of Destination Flag U: route is up !: reject route...
3.1.4 Clients Status Click the Clients Status tab to display the Client information. Field Description IP address Shows IP address of host pc Flags Complete, Incomplete, Permanent, or Publish HW Address Shows the MAC address of host pc Device Shows the connection interface...
3.1.5 DHCP Click the DHCP tab to display all DHCP Leases. Select DHCPv4 from the drop-down menu. Field Description Hostname Shows the host name of device/host/PC MAC Address Shows the Ethernet MAC address of the device/host/PC IP Address Shows IP address of device/host/PC Expires In Shows how much time is left for each DHCP Lease Select DHCPv6 from the drop-down menu.
3.1.6 NAT Session Click the NAT Session tab to display the following. Click Show All to display the following. Field Description Source IP The source IP from which the NAT session is established Source Port The source port from which the NAT session is established Destination IP The IP which the NAT session was connected to Destination Port...
3.1.7 IPv6 Click the IPv6 tab to display the following. IPv6 Info Select IPv6 Info from the drop-down menu. Field Description Interface WAN interface with IPv6 enabled Status Connection status of the WAN interface Address IPv6 Address of the WAN interface Prefix Prefix received/configured on the WAN interface Device Link-local Address...
IPv6 Neighbor Select IPv6 Neighbor from the drop-down menu. Field Description IPv6 Address Ipv6 address of the device(s) found Flags Status of the neighbor device HW Address MAC address of the neighbor device Device Interface from which the device is located IPv6 Route Select IPv6 Route from the drop-down menu.
3.2 Basic Setup You can reach this page by clicking on the Basic Setup icon located on the left side of the screen. This will bring you to the following screen.
3.2.1 Layer 2 Interface Add or remove ATM and ETH WAN interface connections here. Click Add to create a new ATM interface (see Appendix E - Connection Setup). NOTE: Up to 8 ATM interfaces can be created and saved in flash memory. To remove a connection, select its Remove column radio button and click Remove.
3.2.1 Layer 2 Interface Add or remove ATM and ETH WAN interface connections here. Click Add to create a new ATM interface (see Appendix E - Connection Setup). NOTE: Up to 8 ATM interfaces can be created and saved in flash memory. To remove a connection, select its Remove column radio button and click Remove.
Page 39
Click Add to create a new connection. For connections on ATM or ETH WAN interfaces see Appendix E - Connection Setup. To remove a connection, select its Remove column radio button and click Remove. Field Description Interface Name of the interface for WAN Description Name of the WAN connection Type...
3.2.3 LAN Click the LAN tab to display the following. Configure the LAN interface settings and then click Apply/Save. Consult the field descriptions below for more details. GroupName: Select an Interface Group. 1st LAN INTERFACE IP Address: Enter the IP address for the LAN port. Subnet Mask: Enter the subnet mask for the LAN port.
Page 41
Enable Enhanced IGMP: Enable by ticking the checkbox. IGMP packets between LAN ports will be blocked. Enable LAN side firewall: Enable by ticking the checkbox. DHCP Server: To enable DHCP, select Enable DHCP server and enter Start and End IP addresses and the Leased Time. This setting configures the router to automatically assign IP, default gateway and DNS server addresses to every PC on your LAN.
Page 42
2ND LAN INTERFACE To configure a secondary IP address, tick the checkbox outlined (in RED) below. IP Address: Enter the secondary IP address for the LAN port. Subnet Mask: Enter the secondary subnet mask for the LAN port. Ethernet Media Type:...
3.2.4 IPv6 Click the IPv6 tab to display the following.
Page 44
LAN IPv6 Auto Configuration Select IPv6 LAN Auto Configuration from the drop-down menu. Configure the LAN interface settings and then click Save/Apply.
Consult the field descriptions below for more details. LAN IPv6 Link-Local Address Configuration Field Description EUI-64 Use EUI-64 algorithm to calculate link-local address from MAC address User Setting Use the Interface Identifier field to define a link-local address Static LAN IPv6 Address Configuration Field Description Interface Address...
Page 46
To add an entry, enter MAC address and Interface ID and then click Apply/Save. To remove an entry, tick the corresponding checkbox in the Remove column and then click Remove Entries.
Page 47
Field Description Enable RADVD Enable use of router advertisement daemon RA interval Min(sec): Minimum time to send router advertisement RA interval Max(sec): Maximum time to send router advertisement Reachable Time(ms): The time, in milliseconds that a neighbor is reachable after receiving reachability confirmation Default Preference: Preference level associated with the default...
Page 48
Static ARP/IP Neighbor Configuration Select Static ARP/IP Neighbor Configuration from the drop- down menu. Click the Add button to display the following. Click Apply/Save to apply and save the settings. Field Description IP Version The IP version used for the neighbor device IP Address Define the IP Address for the neighbor device MAC Address...
3.2.5 Security To display this function, you must enable the firewall feature in WAN Setup. For detailed descriptions, with examples, please consult Appendix A - Firewall. Click the Security tab to display the following.
Page 50
IP Filtering This screen sets filter rules that limit IP traffic (Outgoing/ Incoming). Multiple filter rules can be set and each applies at least one limiting condition. For individual IP packets to pass the filter all conditions must be fulfilled. NOTE: This function is not available when in bridge mode.
Page 51
To add a filter (to allow incoming IP traffic), click the Add button. On the following screen, enter your filter criteria and then click Apply/Save. Consult the table below for field descriptions. Field Description Filter Name The filter rule label. IP Version Select from the drop down menu.
Page 52
OUTGOING IP FILTER By default, all outgoing IP traffic is allowed, but IP traffic can be blocked with filters. To add a filter (to block some outgoing IP traffic), click the Add button. On the following screen, enter your filter criteria and then click Apply/Save.
Page 53
Each network device has a unique 48-bit MAC address. This can be used to filter (block or forward) packets based on the originating device. MAC filtering policy and rules for the DSL-N12HP can be set according to the following procedure.
Page 54
Click Save/Apply to save and activate the filter rule. Consult the table below for detailed field descriptions. Field Description Protocol Type PPPoE, IPv4, IPv6, AppleTalk, IPX, NetBEUI, IGMP Destination MAC Address Defines the destination MAC address Source MAC Address Defines the source MAC address Frame Direction Select the incoming/outgoing packet interface...
3.2.6 Parental Control This selection provides WAN access control functionality. Click on the Parental Control tab to display the following. Time Restriction This feature restricts access from a LAN device to an outside network through the device on selected days at certain times. Make sure to activate the Internet Time server synchronization as described in section Internet Time, so that the scheduled times match your local time.
Page 56
Click Add to display the following screen. See below for field descriptions. User Name: A user-defined label for this restriction. Browser's MAC Address: MAC address of the PC running the browser. Other MAC Address: MAC address of another LAN device. Days of the Week: The days the restrictions apply.
Page 57
URL Filter This screen allows for the creation of a filter rule for access rights to websites based on their URL address and port number. Select URL Filter from the drop-down menu. Select the Deny radio button to deny access to the websites listed. Select the Allow radio button to restrict access to only those listed websites.
A maximum of 100 entries can be added to the URL Filter list. 3.2.7 Routing The following routing functions are accessed from this menu: Default Gateway, Static Route, Policy Routing, RIP and IPv6 Static Route. NOTE: In bridge mode, the RIP menu option is hidden while the other menu options are shown but ineffective.
Page 59
Default Gateway Select Default Gateway from the drop-down menu. Default gateway interface list can have multiple WAN interfaces served as system default gateways but only one will be used according to the priority with the first being the highest and the last one the lowest priority if the WAN interface is connected.
Page 60
Static Route This option allows for the configuration of static routes by destination IP. Click Add to create a static route or click Remove to delete a static route. Select Static Route from the drop-down menu. Click Add to display the following screen. IP Version: Select the IP version to be IPv4.
Policy Routing This option allows for the configuration of static routes by policy. Select Policy Routing from the drop-down menu. Click Remove to delete an entry. Click Add to display the following. Complete the form and click Apply/Save to create a policy. Field Description Policy Name...
Page 62
RIP Configuration Select RIP Configuration from the drop-down menu. To activate RIP for the WAN Interface, select the desired RIP version and operation and place a check in the "Enabled" checkbox. To stop RIP on the WAN Interface, uncheck the "Enabled" checkbox. Click Apply/Save to start/stop RIP and save the configuration.
3.3 Advanced Setup You can reach this page by clicking on the Advanced Setup icon located on the left side of the screen. This will bring you to the following screen. 3.3.1 NAT NOTE: To display this option, NAT must be enabled in at least one PVC. NAT is not an available option in Bridge mode.
Page 64
Virtual Servers Virtual Servers allow you to direct incoming traffic from the WAN side (identified by Protocol and External port) to the internal server with private IP addresses on the LAN side. The Internal port is required only if the external port needs to be converted to a different port number used by the server on the LAN side.
Page 65
Consult the table below for field and header descriptions. Field Description Use Interface Select a WAN interface from the drop-down box. Select a Service User should select the service from the list. Custom Service User can enter the name of their choice. Server IP Address Enter the IP address for the server.
Port Triggering Some applications require that specific ports in the firewall be opened for access by the remote parties. Port Triggers dynamically 'Open Ports' in the firewall when an application on the LAN initiates a TCP/UDP connection to a remote party using the 'Triggering Ports' .
Page 67
Click Save/Apply to save and apply the settings. Consult the table below for field and header descriptions. Field Description Use Interface Select a WAN interface from the drop-down box. Select an Application User should select the application from the list. Custom Application User can enter the name of their choice.
Page 68
DMZ Host The DSL router will forward IP packets from the WAN that do not belong to any of the applications configured in the Virtual Servers table to the DMZ host computer. Select DMZ Host from the drop-down menu. Click Save/Apply to save and apply the settings. To Activate the DMZ host, enter the DMZ host IP address and click Save/Apply.
Page 69
IP Address Map Mapping Local IP (LAN IP) to some specified Public IP (WAN IP). Select IP Address Map from the drop-down menu. Field Description Rule The number of the rule Type Mapping type from local to public. Local Start IP The beginning of the local IP Local End IP The ending of the local IP...
Page 70
IPSEC ALG IPSEC ALG provides multiple VPN passthrough connection support, allowing different clients on LAN side to establish a secured IP Connection to the WAN server. Select IPSEC ALG from the drop-down menu. To enable IPSEC ALG, tick the checkbox and click Save. SIP ALG This page allows you to enable / disable SIP ALG.
3.3.2 Quality of Service (QoS) NOTE: QoS must be enabled in at least one PVC to display this option. (See Appendix E - Connection Setup for detailed PVC setup instructions). Click the QoS tab to display the following.
Queue Management Configuration Select QoS Queue Setup from the drop-down menu. To Enable QoS tick the checkbox and select a Default DSCP Mark. Click Apply/Save to activate QoS. QoS and DSCP Mark are defined as follows: Quality of Service (QoS): This provides different priority to different users or data flows, or guarantees a certain level of performance to a data flow in accordance with requests from Queue Prioritization.
Page 73
QoS Queue Setup Configure queues with different priorities to be used for QoS setup. In ATM mode, maximum 16 queues can be configured. In PTM mode, maximum 8 queues can be configured. For each Ethernet interface, maximum 3 queues can be configured.
Page 74
The Enable button will scan through every queue in the table. Queues with enable-checkbox checked will be enabled. Queues with enable-checkbox un-checked will be disabled. The enable-checkbox also shows status of the queue after page reload. Note that if WMM function is disabled in Wireless Page, queues related to wireless will not take effect.
Page 75
QoS Policer Setup Select QoS Policer Setup from the drop-down menu. To remove policers, check their remove-checkboxes, then click the Remove button. The Enable button will scan through every policers in the table. Policers with enable-checkbox checked will be enabled. Policers with enable-checkbox un-checked will be disabled.
Page 76
Click Apply/Save to save the policer. Field Description Name Name of this policer rule Enable Enable/Disable this policer rule Meter Type Meter type used for this policer rule Committed Rate (kbps) Defines the rate allowed for committed packets Committed Burst Size (bytes) Maximum amount of packets that can be processed by this policer Conforming Action...
Page 77
QoS Classification Setup The network traffic classes are listed in the following table. Select QoS Classification Setup from the drop-down menu. Click Add to configure a network traffic class rule and Enable to activate it. To delete an entry from the list, click Remove. This screen creates a traffic class rule to classify the upstream traffic, assign queuing priority and optionally overwrite the IP header DSCP byte.
Page 78
Click Apply/Save to save and activate the rule. Field Description Traffic Class Name Enter a name for the traffic class. Rule Order Last is the only option. Rule Status Disable or enable the rule. Classification Criteria Class Interface Select an interface (i.e. Local, eth0-4, wl0) Ether Type Set the Ethernet type (e.g.
Field Description Destination MAC Address A packet belongs to SET-1 then the result that the Destination MAC Address of its header binary-AND to the Destination MAC Mask must equal to the result that this field binary-AND to the Destination MAC Mask. Destination MAC Mask This is the mask used to decide how many bits are checked in Destination MAC Address.
3.3.4 DNS Click the DNS tab to display the following.
Page 81
DNS Server Configuration Select DNS Server Interface from available WAN interfaces OR enter static DNS server IP addresses for the system. In ATM mode, if only a single PVC with IPoA or static IPoE protocol is configured, Static DNS server IP addresses must be entered. DNS Server Interfaces can have multiple WAN interfaces served as system DNS servers but only one will be used according to the priority with the first being the highest and the last one the lowest...
Page 82
Dynamic DNS The Dynamic DNS service allows you to map a dynamic IP address to a static hostname in any of many domains, allowing the DSL- N12HP to be more easily accessed from various locations on the Internet. Select Dynamic DNS from the drop-down menu. To add a dynamic DNS service, click Add.
Page 83
Click Apply/Save to save your settings. Consult the table below for field descriptions. Field Description D-DNS provider Select a dynamic DNS provider from the list Hostname Enter the name of the dynamic DNS server Interface Select the interface from the list Username Enter the username of the dynamic DNS server Password...
Page 84
DNS Entries The DNS Entry page allows you to add domain names and IP address desired to be resolved by the DSL router. Select Dynamic DNS from the drop-down menu. Choose Add or Remove to configure DNS Entry. The entries will become active after save/reboot.
3.3.5 DSL The DSL Settings screen allows for the selection of DSL modulation modes. For optimum performance, the modes selected should match those of your ISP. Click the DSL tab to display the following. DSL Mode Data Transmission Rate - Mbps (Megabits per second) G.Dmt Downstream: 12 Mbps Upstream: 1.3 Mbps...
Page 86
Options Description Bitswap Enable Enables adaptive handshaking functionality SRA Enable Enables Seamless Rate Adaptation (SRA) Select DSL LED Normal (TR-68 compliant): Select this option for DSL LED to operate normally (See section 1.3 Your ADSL modem router) behavior Off:DSL LED will always be OFF G997.1 EOC xTU-R Select Equipment Serial Number or Equipment MAC Address Serial Number...
PC gets an IP via DHCP, the domain name, Home, will be added to PC’s DNS Suffix Search List, and the PC can access route with “ASUS.Home”. Click the DNS Proxy tab to display the following. Click Apply/Save to implement new configuration settings.
3.3.7 Interface Grouping Interface Grouping supports multiple ports to PVC and bridging groups. Each group performs as an independent network. To use this feature, you must create mapping groups with appropriate LAN and WAN interfaces using the Add button. The Remove button removes mapping groups, returning the ungrouped interfaces to the Default group.
Page 89
Click Apply/Save to implement new configuration settings.
Page 90
Automatically Add Clients With Following DHCP Vendor IDs: Add support to automatically map LAN interfaces to PVC's using DHCP vendor ID (option 60). The local DHCP server will decline and send the requests to a remote DHCP server by mapping the appropriate LAN interface.
3.3.7 IP Tunnel Click on the IP Tunnel tab to display the following. IPv6inIPv4 Configure 6in4 tunneling to encapsulate IPv6 traffic over explicitly-configured IPv4 links. Select 6in4 Tunnel Configuration from the drop-down menu.
Page 92
Click the Add button to display the following. Click Apply/Save to implement new configuration settings. Click Return to go back to the previous page. Field Description Tunnel Name Input a name for the tunnel Mechanism Mechanism used by the tunnel deployment Associated WAN Interface Select the WAN interface to be used by the tunnel Associated LAN Interface...
Page 93
IPv4inIPv6 Configure 4in6 tunneling to encapsulate IPv4 traffic over an IPv6- only environment. Select 4in6 Tunnel Configuration from the drop-down menu. Click the Add button to display the following. Click Apply/Save to implement new configuration settings. Click Return to go back to the previous page.
Page 94
Field Description Tunnel Name Input a name for the tunnel Mechanism Mechanism used by the tunnel deployment Associated WAN Interface Select the WAN interface to be used by the tunnel Associated LAN Interface Select the LAN interface to be included in the tunnel Manual/Automatic Select automatic for point-to-multipoint...
3.4.1 Basic The Basic option allows you to configure basic features of the wireless LAN interface. Among other things, you can enable or disable the wireless LAN interface, hide the network from active scans, set the wireless network name (also known as SSID) and restrict the channel set based on country requirements.
Page 97
Consult the table below for descriptions of these options. Field Description Enable Wireless A checkbox that enables or disables the wireless LAN interface. When selected, a set of basic wireless options will appear. Hide SSID Select the checkbox to enable this function. Set AP isolated Select the checkbox to enable this function.
3.4.2 Security The following screen appears when Wireless Security is selected. The options shown here allow you to configure security features of the wireless LAN interface. Click the Security tab to display the following. Please see Appendix F for WPS setup instructions. Click Apply/Save to implement new configuration settings.
Page 99
Select SSID Select the wireless network name from the drop-down menu. SSID stands for Service Set Identifier. All stations must be configured with the correct SSID to access the WLAN. If the SSID does not match, that client will not be granted access. Network Authentication This option specifies whether a network key is used for authentication to the wireless network.
Page 100
WEP Encryption This option specifies whether data sent over the network is encrypted. The same network key is used for data encryption and network authentication. Four network keys can be defined although only one can be used at any one time. Use the Current Network Key list box to select the appropriate network key.
3.4.3 MAC Filter This option allows access to the router to be restricted based upon MAC addresses. Click the MAC Filter tab to display the following. To add a MAC Address filter, click the Add button shown below. To delete a filter, select it from the MAC Address table below and click the Remove button.
3.4.4 Wireless Bridge This screen allows for the configuration of wireless bridge features of the Wi-Fi interface. See the table beneath for detailed explanations of the various options. Click the Wireless Bridge tab to display the following. Click Apply/Save to implement new configuration settings. Feature Description AP Mode...
3.4.5 Advanced The Advanced screen allows you to configure advanced features of the wireless LAN interface. You can select a particular channel on which to operate, force the transmission rate to a particular speed, set the fragmentation threshold, set the RTS threshold, set the wakeup interval for clients in power-save mode, set the beacon interval for the access point, set XPress mode and set whether short or long preambles are used.
Page 104
Field Description Band Set to 2.4 GHz for compatibility with IEEE 802.11x standards. The new amendment allows IEEE 802.11n units to fall back to slower speeds so that legacy IEEE 802.11x devices can coexist in the same network. IEEE 802.11g creates data-rate parity at 2.4 GHz with the IEEE 802.11a standard, which has a 54 Mbps rate at 5 GHz.
Page 105
Field Description Basic Rate Setting for basic transmission rate. Fragmentation A threshold, specified in bytes, that determines whether Threshold packets will be fragmented and at what size. On an 802.11 WLAN, packets that exceed the fragmentation threshold are fragmented, i.e., split into, smaller units suitable for the circuit size.
3.4.7 Station Info This page shows authenticated wireless stations and their status. Click the Refresh button to update the list of stations in the WLAN. Click the Station Info tab to display the following. Consult the table below for descriptions of each column heading. Field Description Lists the MAC address of all the stations.
Configuring the System settings 4.1 Diagnostics You can reach this page by clicking on the Diagnostics icon located on the left side of the screen. 4.1.1 Individual Tests The first Diagnostics screen is a dashboard that shows overall connection status. Click the Diagnostics tab to display the following.
4.1.2 Uptime Status This page shows System, DSL, ETH and Layer 3 uptime. If the DSL line, ETH or Layer 3 connection is down, the uptime will stop incrementing. If the service is restored, the counter will reset and start from 0. A Bridge interface will follow the DSL or ETH timer. Click the Uptime Status tab to display the following.
4.2 Management You can reach this page by clicking on the Management icon located on the left side of the screen. 4.2.1 Settings Click on the Settings tab to display the following. This includes Restore Default, Save Setting, and Restore Setting screens.
Page 111
Restore Default Click the Restore button to restore factory default settings. After clicking Restore, the following window appears. Click OK to display the following. Close the browser and wait for 2 minutes before reopening it. It may also be necessary, to reconfigure your PC IP configuration to match any new settings.
Page 112
Save Setting To save the current configuration to a file on your PC, click the Save button. You will be prompted for backup file location. This file can later be used to recover settings on the Restore Setting screen, as described below. Upload Setting This option recovers configuration files previously saved using Save Setting.
4.2.2 System Log This function allows a system log to be kept and viewed upon request. Click the System Log tab to display the following. Select the desired values and click Apply/Save to configure the system log options. Consult the table below for detailed descriptions of each system log option.
Page 114
The events ranging from the highest critical level “Emergency” down to this configured level will be recorded to the log buffer on the DSL-N12HP SDRAM. When the log buffer is full, the newer event will wrap up to the top of the log buffer and overwrite the old event.
4.2.3 Internet Time This option automatically synchronizes the router time with Internet timeservers. Click the Internet Time tab to display the following. To enable time synchronization, tick the corresponding checkbox, choose your preferred time server(s), select the correct time zone offset, and click Apply/Save.
4.2.4 Access Control Click the Access Control tab to display the following. Passwords This screen is used to configure the user account access passwords for the device. Select Access Control - Accounts/Passwords from the drop- down menu. Use the fields to update passwords for the accounts administration.
Page 117
Service Access The Services option limits or opens the access services over the LAN or WAN. Select Access Control – Service Access from the drop-down menu. These access services available are: HTTP, SSH, TELNET, HTTPS and ICMP. Enable a service by selecting its drop-down list box. Click Apply/Save to activate.
Page 118
IP Address The IP Address Access Control mode, if enabled, permits access to local management services from IP addresses contained in the Access Control List. If the Access Control mode is disabled, the system will not validate IP addresses for incoming packets. The services are the system applications listed in the Service Control List beside ICMP.
4.2.5 Update Software This option allows for firmware upgrades from a locally stored file. Click the Update Software tab to display the following. 1. Obtain an updated software image file from your ISP. 2. Select the configuration from the drop-down menu. Configuration options: No change –...
Page 120
DSL-N12HP. If you have any comments, suggestions or connection issue, complete the form below, these information along with current DSL logs will be send to ASUS Support Team. In order to allow us to respond to your feedback, kindly ensure that you have entered your e-mail correctly.
Logout & Reboot To log out from the device simply click the Logout button at the top of your screen. When the following window pops up, click the OK button to exit the router. Upon successful exit, the following message will be displayed.
Page 122
To reboot the device simply click the Reboot button at the top of your screen. While rebooting, the following message will be displayed.
Appendix A - Firewall STATEFUL PACKET INSPECTION Refers to an architecture, where the firewall keeps track of packets on each connection traversing all its interfaces and makes sure they are valid. This is in contrast to static packet filtering which only examines a packet based on the information in the packet header.
Page 124
This filter will Drop all TCP packets coming from the LAN with IP Address/Subnet Mask of 192.168.1.45/24 having a source port of 80 irrespective of the destination. All other packets will be Accepted. Example 2: Filter Name: Out_Filter2 Protocol: Source IP Address: 192.168.1.45 Source Subnet Mask: 255.255.255.0...
Page 125
Selected WAN interface: This filter will ACCEPT all TCP packets coming from WAN interface “br0” with IP Address/Subnet Mask 210.168.219.45/16 with a source port of 80, irrespective of the destination. All other incoming packets on this interface are DROPPED. Example 2: Filter Name: In_Filter2 Protocol: Policy:...
Page 126
All other frames on this interface are dropped. DAYTIME PARENTAL CONTROL This feature restricts access of a selected LAN device to an outside Network through the DSL-N12HP , as per chosen days of the week and the chosen times. Example: User Name:...
Appendix B - Pin Assignments ETHERNET Ports (RJ45) ETHERNET LAN Ports (10/100Base-T) Table 1 Definition Definition Transmit data+ Transmit data- Receive data- Receive data+ Signals for ETHERNET WAN port (10/1001000Base-T) Table 2 Signal name Signal definition TRD+(0) Transmit/Receive data 0 (positive lead) TRD-(0) Transmit/Receive data 0 (negative lead) TRD+(1)
Appendix C – Specifications Hardware Interface • RJ-11 X 1 for ADSL • RJ-45 X 4 for LAN (10/100 Base-T auto-sense) • WPS/Wi-Fi Button X 1 • On/Off Button X 1 • Reset Button X 1 • Wi-Fi Antenna X 2 WAN Interface • Downstream up to 12M for ADSL, 24 Mbps for ADSL2+; Upstream up to 1.3 Mbps, • ITU-T G.992.5, ITU-T G.992.3, ITU-T G.992.1, ANSI T1.413 Issue 2, Annex A/L/M LAN Interface • Standard IEEE 802.3, IEEE 802.3u • Support MDI/MDX • 10/100 Base T Auto-sense Wireless Interface •...
Networking Protocols • RFC 2684 VC-MUX, LLC/SNAP encapsulations for bridged or routed packet • RFC 2364 PPP over AAL5 • IPoA, PPPoA, PPPoE, Multiple PPPoE sessions on single PVC, PPPoE pass-through • PPPoE filtering of on-PPPoE packets between WAN and LAN • Transparent bridging between all LAN and WAN interfaces • 802.1p/802.1q VLAN support • Spanning Tree Algorithm • IGMP Proxy V1/V2/V3, IGMP Snooping V1/V2/V3, Fast leave • Static route, RIP v1/v2, ARP, RARP, SNTP • DHCP Server/Client/Relay, • DNS Proxy/Relay, Dynamic DNS, • UPnP IGD v1.0 • IPv6 subset Security Functions • PAP, CHAP, Packet and MAC address filtering, SSH • VPN termination • Three level login including local admin, local user and remote technical support access •...
Page 130
Firewall/Filtering • Stateful Inspection Firewall • Stateless Packet Filter • Denial of Service (DOS): ARP attacks, Ping attacks, Ping of Death, LAND,SYNC, Smurf, Unreachable, Teardrop • TCP/IP/Port/interface filtering rules Support both incoming and outgoing filtering NAT/NAPT • Support Port Triggering and Port forwarding • Symmetric port-overloading NAT, Full-Cone NAT • Dynamic NAPT (NAPT N-to-1) • Support DMZ host • Virtual Server (Port forwarding) • VPN Passthrough (PPTP, L2TP, IPSec) Application Passthrough PPTP, L2TP, IPSec, Yahoo messenger, ICQ, RealPlayer, NetMeeting, MSN, X-box, etc.
Appendix D - SSH Client Unlike Microsoft Windows, Linux OS has a ssh client included. For Windows users, there is a public domain one called “putty” that can be downloaded from here: http://www.chiark.greenend.org. uk/~sgtatham/putty/download.html To access the ssh client you must first enable SSH access for the LAN or WAN from the Management >...
Ethernet WAN interfaces. After adding WAN connections to an interface, you must also create an Interface Group to connect LAN/WAN interfaces. E1.1 ATM Interfaces Follow these procedures to configure an ATM interface. NOTE: The DSL-N12HP supports up to 16 ATM interfaces.
Page 133
1. Click Add to create a new ATM interface. NOTE: To add WAN connections to one interface type, you must delete existing connections from the other interface type using the Remove button. This table is provided here for ease of reference. Field Description Interface...
Page 134
There are many settings here including: VPI/VCI, DSL Link Type, Encapsulation Mode, Service Category, Connection Mode and Quality of Service. Here are the available encapsulations for each xDSL Link Type: • EoA- LLC/SNAP-BRIDGING, VC/MUX • PPPoA- VC/MUX, LLC/ENCAPSULATION • IPoA- LLC/SNAP-ROUTING, VC MUX 2. Click Apply/Save to confirm your choices.
On the next screen, check that the ATM interface is added to the list. For example, an ATM interface on PVC 0/35 in Default Mode with an EoA Link type is shown below. To add a WAN connection go to section E2 WAN Connections. E1.2 ETHERNET WAN Interfaces Follow these procedures to configure an Ethernet WAN interface.
Page 136
2. Select an Ethernet port and Click Apply/Save to confirm your choices. On the next screen, check that the ETHERNET interface is added to the list.
WAN Connections The DSL-N12HP supports one WAN connection for each interface, up to a maximum of 16 connections. 1. Click the WAN Service tab to display the following. 2. Click the Add button to create a WAN connection. The following screen will display.
Page 138
NOTE: The WAN services shown here are those supported by the layer 2 interface you selected in the previous step. If you wish to change your selection click the Back button and select a different layer 2 interface. 4. For VLAN Mux Connections only, you must enter Priority & VLAN ID tags.
E2.1 PPP over ETHERNET (PPPoE) 1. Select the PPP over Ethernet radio button and click Next. You can also enable IPv6 by ticking the checkbox at the bottom of this screen. 2. On the next screen, enter the PPP settings as provided by your ISP.
Page 140
The settings shown above are described below. PPP SETTINGS The PPP Username, PPP password and the PPPoE Service Name entries are dependent on the particular requirements of the ISP. The user name can be a maximum of 256 characters and the password a maximum of 32 characters in length. For Authentication Method, choose from AUTO, PAP, CHAP, and MSCHAP.
Page 141
DIAL ON DEMAND The DSL-N12HP can be configured to disconnect if there is no activity for a period of time by selecting the Dial on demand checkbox. You must also enter an inactivity timeout period in the range of 1 to 4320 minutes.
Page 142
ENABLE NAT If the LAN is configured with a private IP address, the user should select this checkbox. The NAT submenu will appear in the Advanced Setup menu after reboot. On the other hand, if a private IP address is not used on the LAN side (i.e. the LAN side is using a public IP), this checkbox should not be selected to free up system resources for better performance.
Page 143
PPPoE clients, otherwise disable it. The DSL-N12HP supports pass- through PPPoE sessions from the LAN side while simultaneously running a PPPoE client from non-PPPoE LAN devices. ENABLE IGMP MULTICAST PROXY Tick the checkbox to enable Internet Group Membership Protocol (IGMP) multicast. This protocol is used by IPv4 hosts to report their multicast group memberships to any neighboring multicast routers.
Page 144
Click Next to continue or click Back to return to the previous step. 4. The WAN Setup - Summary screen shows a preview of the WAN service you have configured. Check these settings and click Apply/Save if they are correct, or click Back to modify them.
E2.2 IP over ETHERNET (IPoE) 1. Select the IP over Ethernet radio button and click Next. NOTE: For tagged service, enter valid 802.1P Priority and 802.1Q VLAN For untagged service, set -1 to both 802.1P Priority and 802.1Q VLAN ID.
Page 146
2. The WAN IP settings screen provides access to the DHCP server settings. You can select the Obtain an IP address automatically radio button to enable DHCP (use the DHCP Options only if necessary). However, if you prefer, you can instead use the Static IP address method to assign WAN IP address, Subnet Mask and Default Gateway manually.
Page 147
3. This screen provides access to NAT, Firewall and IGMP Multicast settings. Enable each by selecting the appropriate checkbox. Click Next to continue or click Back to return to the previous step. ENABLE NAT If the LAN is configured with a private IP address, the user should select this checkbox.
Page 148
ENABLE IGMP MULTICAST Tick the checkbox to enable Internet Group Membership Protocol (IGMP) multicast. IGMP is a protocol used by IPv4 hosts to report their multicast group memberships to any neighboring multicast routers. Enable WAN interface with base MAC Enable this option to use the router’s base MAC address as the MAC address for this WAN interface.
Page 149
5. Select DNS Server Interface from available WAN interfaces OR enter static DNS server IP addresses for the system. In ATM mode, if only a single PVC with IPoA or static IPoE protocol is configured, Static DNS server IP addresses must be entered. If IPv6 is enabled, the following will also be shown.
Page 150
6. The WAN Setup - Summary screen shows a preview of the WAN service you have configured. Check these settings and click Apply/Save if they are correct, or click Back to modify them. After clicking Apply/Save, the new service should appear on the main screen.
E2.3 Bridging 1. Select the Bridging radio button and click Next. NOTE: For tagged service, enter valid 802.1P Priority and 802.1Q VLAN For untagged service, set -1 to both 802.1P Priority and 802.1Q VLAN ID.
Page 152
2. The WAN Setup - Summary screen shows a preview of the WAN service you have configured. Check these settings and click Apply/Save if they are correct, or click Back to return to the previous screen. After clicking Apply/Save, the new service should appear on the main screen.
E2.4 PPP over ATM (PPPoA) 1. Click Next to continue. 2. On the next screen, enter the PPP settings as provided by your ISP. Click Next to continue or click Back to return to the previous step.
Page 154
DIAL ON DEMAND The DSL-N12HP can be configured to disconnect if there is no activity for a period of time by selecting the Dial on demand checkbox. You must also enter an inactivity timeout period in the range of 1 to 4320 minutes.
Page 155
ports, unless the packet is addressed to the device’s LAN IP address. • The public IP address assigned by the remote side using the PPP/IPCP protocol is actually not used on the WAN PPP interface. Instead, it is forwarded to the PC LAN interface through DHCP. Only one PC on the LAN can be connected to the remote, since the DHCP server within the device has only a single IP address to assign to a LAN device.
Page 156
ENABLE IGMP MULTICAST PROXY Tick the checkbox to enable Internet Group Membership Protocol (IGMP) multicast. This protocol is used by IPv4 hosts to report their multicast group memberships to any neighboring multicast routers. NO MULTICAST VLAN FILTER Tick the checkbox to Enable/Disable multicast VLAN filter. Enable WAN interface with base MAC Enable this option to use the router’s base MAC address as the MAC address for this WAN interface.
Page 157
4. Choose an interface to be the default gateway. Click Next to continue or click Back to return to the previous step. 5. The WAN Setup - Summary screen shows a preview of the WAN service you have configured. Check these settings and click Apply/Save if they are correct, or click Back to modify them.
E2.5 IP over ATM (IPoA) 1. Click Next to continue. 2. Enter the WAN IP settings provided by your ISP. Click Next to continue. 3. This screen provides access to NAT, Firewall and IGMP Multicast settings. Enable each by selecting the appropriate checkbox.
Page 159
ENABLE NAT If the LAN is configured with a private IP address, the user should select this checkbox. The NAT submenu will appear in the Advanced Setup menu after reboot. On the other hand, if a private IP address is not used on the LAN side (i.e. the LAN side is using a public IP), this checkbox should not be selected, so as to free up system resources for improved performance.
Page 160
4. Choose an interface to be the default gateway. Click Next to continue or click Back to return to the previous step. 5. Choose an interface to be the default gateway. Click Next to continue or click Back to return to the previous step.
Page 161
6. The WAN Setup - Summary screen shows a preview of the WAN service you have configured. Check these settings and click Apply/Save if they are correct, or click Back to modify them. After clicking Apply/Save, the new service should appear on the main screen.
Appendix F - WPS OPERATION This section shows the basic AP WPS Operation procedure. Add Enrollee with Pin Method 1. Click on the Wireless tab on the left side of your screen. Then, click on the Security tab to display the following. 2.
3. When the screen refreshes select the Radio button Enter STA Pin. 4. Input Pin from Enrollee Station (15624697 in this example) 5. Click Add Enrollee. 6. Operate Station to start WPS Adding Enrollee. Add Enrollee with PBC Method 1. Press the WPS/Wi-Fi button on the back panel of the router to activate WPS PBC operation.
We believe in providing solutions for you to be able to responsibly recycle our products, batteries, other components, as well as the packaging materials. Please go to http://csr.asus. com/english/Takeback.htm for the detailed recycling information in different regions.
Page 165
This equipment generates, uses and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communications. However, there is no guarantee that interference will not occur in a particular installation. If this equipment does cause harmful interference to radio or television reception, which can be determined by turning the equipment off and on, the user is encouraged to try to correct the interference by one or more of...
Safety Information To maintain compliance with FCC’s RF exposure guidelines, this equipment should be installed and operated with minimum distance 20cm between the radiator and your body. Use on the supplied antenna. Declaration of Conformity for R&TTE directive 1999/5/EC Essential requirements – Article 3 Protection requirements for health and safety –...
Page 167
Radio Frequency (RF) Exposure Information The radiated output power of the ASUS Wireless Device is below the Industry Canada (IC) radio frequency exposure limits. The ASUS Wireless Device should be used in such a manner such that the potential for human contact during normal operation is minimized.
Page 168
canadiennes ICES-003 et RSS-210. Son fonctionnement est soumis aux deux conditions suivantes: (1) cet appareil ne doit pas causer d’interférence et (2) cet appareil doit accepter toute interférence, notamment les interférences qui peuvent a ecter son fonctionnement. 警語 經型式認證合格之低功率射頻電機,非經許可,公司、商號或 使用者均不得擅自變更頻率、加大功率或變更原設計之特性及 功能。低功率射頻電機之使用不得影響飛航安全及干擾合法通...
Page 169
Everyone is permitted to copy and distribute verbatim copies of this license document, but changing it is not allowed. Preamble The licenses for most software are designed to take away your freedom to share and change it. By contrast, the GNU General Public License is intended to guarantee your freedom to share and change free software--to make sure the software is free for all its users.
Page 170
We protect your rights with two steps: (1) copyright the software, and (2) offer you this license which gives you legal permission to copy, distribute and/or modify the software. Also, for each author’s protection and ours, we want to make certain that everyone understands that there is no warranty for this free software.
Page 171
act of running the Program is not restricted, and the output from the Program is covered only if its contents constitute a work based on the Program (independent of having been made by running the Program). Whether that is true depends on what the Program does.
Page 172
the program under these conditions, and telling the user how to view a copy of this License. (Exception: if the Program itself is interactive but does not normally print such an announcement, your work based on the Program is not required to print an announcement.) These requirements apply to the modified work as a whole.
Page 173
be distributed under the terms of Sections 1 and 2 above on a medium customarily used for software interchange; or, c) Accompany it with the information you received as to the offer to distribute corresponding source code. (This alternative is allowed only for noncommercial distribution and only if you received the program in object code or executable form with such an offer, in accord with Subsection b above.) The source code for a work means the preferred form of...
Page 174
Therefore, by modifying or distributing the Program (or any work based on the Program), you indicate your acceptance of this License to do so, and all its terms and conditions for copying, distributing or modifying the Program or works based on it. 6.
Page 175
range of software distributed through that system in reliance on consistent application of that system; it is up to the author/ donor to decide if he or she is willing to distribute software through any other system and a licensee cannot impose that choice.
Page 176
For software which is copyrighted by the Free Software Foundation, write to the Free Software Foundation; we sometimes make exceptions for this. Our decision will be guided by the two goals of preserving the free status of all derivatives of our free software and of promoting the sharing and reuse of software generally.
Page 177
For Turkey only Authorised distributors in Turkey: BOGAZICI BIL GISAYAR SAN. VE TIC. A.S. Tel. No.: +90 212 3311000 Address: AYAZAGA MAH. KEMERBURGAZ CAD. NO.10 AYAZAGA/ISTANBUL CIZGI Elektronik San. Tic. Ltd. Sti. Tel. No.: +90 212 3567070 Address: CEMAL SURURI CD. HALIM MERIC IS MERKEZI No: 15/C D:5-6 34394 MECIDIYEKOY/ ISTANBUL KOYUNCU ELEKTRONiK BiLGi iSLEM SiST.
ASUS COMPUTER INTERNATIONAL (America) Address 800 Corporate Way, Fremont, CA 94539, USA Telephone +15107393777 +15106084555 Website usa.asus.com Online support support.asus.com ASUS COMPUTER GmbH (Germany and Austria) Address Harkort Str. 21-23, D-40880 Ratingen, Germany Support Fax +49-2102-959931 Website asus.com/de Online contact eu-rma.asus.com/sales Technical Support...