NF18MESH User Guide
NF18MESH User Guide
CloudMesh Gateway
reception, or the failure of the NetComm NF18MESH to transmit or receive such data. v1.0 Initial document release April 2020
v1.1 Added notes about Block list limitations and SAMBA support March 2021
Copyright
Table i. – Document revision history
Copyright© 2021 NetComm Wireless Limited. All rights reserved.
Trademarks and registered trademarks are the property of NetComm Wireless Limited or their
respective owners. Specifications are subject to change without notice. Images shown may vary
slightly from the actual product.
The cardboard box, the plastic contained in the packaging, and the parts that make up this
device can be recycled in accordance with regionally established regulations. Never dispose of
this electronic equipment along with domestic waste. You may be subject to penalties or
sanctions under the law. Instead, ask for disposal instructions from your municipal government.
PHONE ............................................................................................................ 31
ADVANCED ..................................................................................................... 37
Diagnostics – Information ................................................................................................................................ 38
Diagnostics – Statistics ..................................................................................................................................... 41
Diagnostics – Troubleshooting ....................................................................................................................... 45
Diagnostics – Logs............................................................................................................................................ 47
Routing – NAT................................................................................................................................................... 49
Routing – Routing ............................................................................................................................................. 53
Routing – DDNS ............................................................................................................................................... 55
Management – TR-069 Client.......................................................................................................................... 56
Management – SNMP Agent .......................................................................................................................... 58
Management – Passwords ............................................................................................................................... 59
Management – LED Control............................................................................................................................ 60
LAN .................................................................................................................................................................... 61
Local Area Network – IPv4............................................................................................................................61
Local Area Network – IPv6............................................................................................................................64
Local Area Network – VLAN .........................................................................................................................66
Wireless Advanced Settings – Wireless Bridge ............................................................................................67
Wireless Advanced Settings – MAC Filter....................................................................................................68
Wireless Advanced Settings – Advanced .....................................................................................................69
Phone – SIP Settings ........................................................................................................................................ 76
Configuring a VoIP dial plan ........................................................................................................................78
System................................................................................................................................................................ 79
QoS .................................................................................................................................................................... 82
Security .............................................................................................................................................................. 88
Introduction Notation
This manual provides information related to the installation, operation, and use of the The following symbols are used in this manual:
NF18MESH.
Target audience
Important – This is important information that may require your attention.
Prerequisites
Before continuing with the installation of your NF18MESH, please confirm that you meet the
minimum system requirements below.
Green
DEFINITION
Green Data is being transmitted to or from the WAN. The following interfaces are available on the rear panel of the NF18MESH:
WAN
Blinking
Green Synching
DSL
Blinking
1 DSL Use the provided RJ11 cable to connect the router to the
telephone line operating your xDSL service.
2 TELEPHONE 1 Connect a regular analogue telephone handset here for use with
and 2 a VoIP service.
5 RESET button Reset unit to Default by holding the Reset button down for 10
seconds when unit is powered on.
6 2.4G WPS Press the 2.4G WPS button to activate the WPS PBC pairing
and function for the 2.4GHz radio.
5G WPS Press the 5G WPS button to activate the WPS PBC pairing
buttons function for the 5GHz radio.
7 USB1 Connect an external USB storage device here to use the Network
Attached Storage (NAS) feature of the NF18MESH.
8 POWER supply Connection point for the included power adapter. Connect the
jack power supply here.
9 Rear product Contains information about this specific NF18 MESH device,
label including:
Product Model Number
Part Code
MAC ID number
Serial Number
Gateway Login details
WiFi Network Name and password
Power requirements, etc.
NO INTERFACE DESCRIPTION
Note – While some of the items listed below can affect network performance, they will not prohibit your
wireless network from functioning; if you are concerned that your network is not operating at its maximum
When transporting the NF18MESH, it is recommended to return the product in the original effectiveness, this check list may help
packaging. This ensures that the product will not be damaged.
If you experience difficulties connecting wirelessly between your WiFi devices and your
Attention – In the event the product needs to be returned, ensure it is securely packaged with NF18MESH, please try the following steps:
appropriate padding to prevent damage during courier transport.
In multi-storey homes, place the NF18MESH on a floor that is as close to the centre of
the home as possible. This may mean placing the NF18MESH on an upper floor.
Physical dimensions and weight Try not to place the NF18MESH near a cordless telephone that operates at the same
radio frequency as the NF18MESH (2.4GHz/5GHz).
The table below lists the physical dimensions and weight of the NF18MESH.
DIMEN SIONS
Avoid obstacles and interference
Width 230 mm
Avoid placing your NF18MESH near devices that may emit radio “noise,” such as microwave
Height 200 mm ovens. Dense objects that can inhibit wireless communication include:
Depth 75 mm Refrigerators
Large aquariums
Cordless phones
Connect a client via Ethernet cable
If the performance of your wireless network is impaired after considering the above issues, and
you have a cordless phone: 1 Connect the yellow Ethernet cable provided to one of the yellow ports marked
‘Ethernet’ at the back of the NF18MESH.
Try moving cordless phones away from your NF18MESH and your wireless-enabled
computers. 2 Connect the other end of the yellow Ethernet cable to your computer.
Unplug and remove the battery from any cordless phone that operates on the 2.4GHz or 3 Wait approximately 30 seconds for the connection to establish.
5GHz band (check manufacturer’s information). If this fixes the problem, your phone
may be interfering with the NF18MESH. 4 Open a web browser (such as Mozilla Firefox® or Google Chrome™), type
http://cloudmesh.net into the address bar and press Enter.
If your phone supports channel selection, change the channel on the phone to the
farthest channel from your wireless network. For example, change the phone to channel If you encounter difficulties connecting, type http://192.168.20.1 and press Enter.
1 and move your NF18MESH to channel 11. See your phone’s user manual for detailed
5 Follow the steps to set up your NF18MESH.
instructions.
See the Initial NF18MESH configuration section of this guide on page 14.
If necessary, consider switching to a 900MHz or 1800MHz cordless phone.
2 Scan for wireless networks in your area and connect to the network name that matches
the WiFi Network Name that is printed on label on the back of the NF18MESH.
3 When prompted for your wireless security settings, enter the Wireless security key
configured on the NF18MESH.
See the Initial NF18MESH configuration section of this guide on page 14.
3 Once the device is connected, the WPS LED will remain illuminated and details of the 4 The WPS blue icon will blink while the connection is established.
device will be added to the Wireless Clients list.
5 Once the device is connected, the WPS LED will remain illuminated and details of the
device will be added to the Wireless Clients list.
After establishing a connection between the NF18MESH and your web browser (see previous:
Connect a client via Ethernet cable or Connect a client wirelessly) enter
http://cloudmesh.net or http://192.168.20.1 into the address bar and press Enter.
Log in
The login screen will appear:
Click the Yes, start the setup wizard button to select this option.
See next section, Setup Wizard, for a detailed description of the wizard.
Enter the default Username “admin” (all letters are lowercase) and the unique Password which
is printed on the label on the back of the NF18MESH. Go to the Main Menu
It is recommended that after you set up the NF18MESH you choose a more secure username Alternatively, you can use the Advanced
and password. These can be set in: Main menu >Advanced > Management > Passwords setup features in the NF18MESH’s user
interface.
INTERNET settings
The INTERNET settings prompt you to select the WAN connection type that you will be using and to enter all the parameters required to enable the service.
Then select from the available range of CONNECTION TYPES for that type of service.
Your ISP (Internet Service Provider) will have advised you which service and connection type you will be using.
ADSL (Asymmetric Digital Subscriber Line) is the most common telephone line internet service for typical consumers. There are a number of variations of ADSL, for example ADSL2 and ADSL2+. For
purposes of this manual ADSL refers to all of these related service types.
VDSL (Very-high-bit-rate Digital Subscriber Line) and second-generation VDSL2, are digital subscriber line (DSL) technologies providing data transmission faster than asymmetric digital subscriber line
(ADSL). VDSL services may or may not be available from your ISP or in your area. Check with your ISP.
Ethernet WAN services are normally employed when part of the internet connection is cable or fibre optic or other very high-speed services.
PPPoE PPPoA
When the computer/router connects to the internet your ISP will VPI (Virtual Path Identifier) and VCI (Virtual Channel Identifier)
dynamically assign any available IP to it. Therefore, the IP are commonly 8 and 35 respectively.
address will change each time a new connection is established.
PPPoE Dynamic IP
Static IP – Users define IP addresses for each device. VPI (Virtual Path Identifier) and VCI (Virtual Channel Identifier) are
commonly 8 and 35 respectively.
Bridge – The device relies on the configuration of another Your ISP will advise you of your default PPPoE authentication
gateway on the connection. Username and Password. Normally you will be given the
opportunity to change these to be more secure.
VPI (Virtual Path Identifier) and VCI (Virtual Channel Identifier) are
commonly 8 and 35 respectively.
Static IP Bridge
VPI (Virtual Path Identifier) and VCI (Virtual Channel Identifier) are
commonly 8 and 35 respectively.
VPI (Virtual Path Identifier) and VCI (Virtual Channel Identifier) are
commonly 8 and 35 respectively.
Contact your ISP for the WAN and DNS servers’ details.
PPPoE Dynamic IP
Static IP – Users define IP addresses for each device. VPI (Virtual Path Identifier) and VCI (Virtual Channel Identifier) are
commonly 8 and 35 respectively.
Bridge – The device relies on the configuration of another Your ISP will advise you of your default PPPoE authentication
gateway on the connection. Username and Password. Normally you will be given the
opportunity to change these to be more secure.
VPI (Virtual Path Identifier) and VCI (Virtual Channel Identifier) are
commonly 8 and 35 respectively.
Static IP Bridge
VPI (Virtual Path Identifier) and VCI (Virtual Channel Identifier) are
commonly 8 and 35 respectively.
VPI (Virtual Path Identifier) and VCI (Virtual Channel Identifier) are
commonly 8 and 35 respectively.
Contact your ISP for the WAN and DNS servers’ details.
When you have completed the INTERNET settings, click the Next > button to proceed to the Wizard’s WIRELESS settings.
The three settings for each frequency (Network Name, Security Key Type and WiFi Password)
Security Key Type
function in the same manner, there details are as follows. The default WPA2-PSK (Wi-Fi Protected Access 2 - Pre-Shared Key) offers high-grade security to
home or smaller business networks without the necessity of dedicated security systems and
Network Name services.
Initially this will be the same as the WiFi Network Name printed on the label on the back of the Use the mixed-mode option WPA-PSK/WPA2-PSK where you may be connecting devices which are
NF18MESH. You can later change this to a more recognisable name that can be easily identified if much older than the latest standard, the older devices will access the WiFi network using the older
multiple WiFi connections are available. WPA-PSK protocol.
We do not suggest selecting OPEN as this will leave your network unprotected from intrusion via
your WiFi connection, that is anyone within range of your WiFi signal could get into your network.
WiFi Password
Initially this will also be the same as the WiFi Password also printed on the label on the back of the
NF18MESH. You can later change the password to a more recognisable one either here or later in
the Wireless settings page.
If you do not wish to use this service, feel free to skip this step.
Click the Next > button to continue to the next step of the Basic Setup Wizard.
New Login Password Passwords can be up to sixteen (16) characters (letters and/or
numbers and/or special character), NO spaces allowed.
Passwords are case sensitive.
Confirm Login Password Re-enter the New Login Password exactly as entered above.
Important –If you forget your new Username and/or Password, you can reset Click the Next > button after making any changes to save and continue.
the gateway to factory defaults and log in using the original details.
Setting the correct timezone selected is necessary for the implementation of Parental Control Select the correct timezone for your location from the dropdown menu:
features and any time-based events.
Click the Next > button after making any changes to continue.
Allow the gateway sufficient time (three to four minutes) to establish its connections.
ITEM DESCRIPTION
Phone Line 1 & 2 Indicates the status of either of your optional VoIP Phone Line connections.
If not ✓ Successful and you were expecting VoIP service, click on the red or yellow message
area to jump back to the PHONE section of the Wizard. You may need to contact your VoIP
service provider of ISP for additional setup instructions.
Timezone Indicates the timezone you selected at the TIMEZONE stage of this Wizard.
Click the < Back button twice if you want to change it.
Login Username The Username used or set to be used to access the gateway.
Login Password The Password used or set to be used to access the gateway.
Wireless Network (2.4 GHz) The name of the 2.4GHz network, either assigned by your ISP or created by you at the
WIRELESS stage of this Wizard. This will appear in the list of wireless networks that appears
when your wireless device scans for available networks.
Click the < Back button four times if you want to change it or enable the 2.4GHz network.
Wireless Password (2.4 GHz) The Password either assigned by your ISP or created by you at the WIRELESS stage of this
Wizard to access the 2.4GHZ network.
Click the < Back button four times if you want to change it or enable the 2.4GHz network.
Wireless Network (5 GHz) The same functionality for 5GHZ wireless networks as for 2.4GHz networks described above.
Wireless Password (5 GHz) The same functionality for 5GHZ wireless networks as for 2.4GHz networks described above.
Security Key Refer to the WiFi Password printed on the back label of
the NF18 MESH
Wireless (WIFI) table
Username admin
Close the web user interface and wait for 2 minutes before reopening your web browser.
When you next log in using the default Username and Password you will be prompted to run the first
time Setup Wizard.
Click either the LOG OUT link or the icon to end your
session and close the web interface.
System time The time retrieved from the NTP (Network Time Protocol) server when
Automatically synchronize with Internet time servers. is selected on the
Advanced > System > Internet Time page.
If your area observes daylight savings time, ensure that Enable Daylight
Saving Time is selected as well.
Time since last reboot The time that has elapsed since the last time the gateway was ‘rebooted’,
normally meaning when it was last turned off and then on.
Internet Information
ITEM DESCRIPTION
Line rate - upstream The current speed of data being uploaded from the NF18MESH.
Line rate - downstream The current speed of data being downloaded into the NF18MESH.
For more information on Internet connections, including how to create new ones and edit existing ones, refer to the INTERNET section on page 28.
Wireless network name Enter a recognisable name in case there are other 2.4 GHz services in the area.
Security Can be OPEN (not recommended), 802.1x, WPA2, WPA2-PSK, Mixed WPA / WPA2, or
Mixed WPA / WPA2-PSK
Wireless Client details – A list of all devices that are currently accessing this 2.4 GHz WiFi service.
For each device four items of information are displayed:
SSID The WiFi network name identifier, also known as SSID (service set identifier).
MAC Address The device’s unique MAC (Media Access Control) address
ITEM DESCRIPTION
Wireless network name Enter a recognisable name in case there are other 5 GHz services in the area.
Channel (Frequency)
Security
Wireless Client details – A list of all devices that are currently accessing this 5 GHz WiFi service.
For each device four items of information are displayed:
SSID The WiFi network name identifier, also known as an SSID (service set identifier).
MAC Address The device’s unique MAC (Media Access Control) address
For more information on both 2.4 GHz and 5GHz Wireless settings refer to the WIRELESS section on page 29.
Name The name given to the USB drive (often the manufacturer’s default name)
Phone Details
ITEM DESCRIPTION
Edit a service
Click on the linked Description name to open the Edit Existing settings dialog.
The available settings are the same when you create a new service, see next.
Internet Service The service type: ADSL, VDSL or Ethernet WAN Create a new connection
Connection Type The connection type differs depending on the service type.
This requires a complex explanation because there are three different Service types,
VLAN ID Applicable only to VLAN services. each of which has up to four different kinds of connection types.
You can also create optional Guest accounts for the 2.4GHz and/or 5GHz wireless services.
Turn On the service you will use (or both) and enter a recognisable Name so that you can
identify the service when devices access it.
More Settings
Click the More Settings button to display
all available settings for the selected
service. The additional settings for and 5
GHz are shown on the right.
The NF18MESH gateway supports both 2.4GHz and 5GHz wireless services.
It is designed to automatically select the optimal WiFi band for your WiFi devices. Note that this
auto-select functionality is enabled only when both the 2.4GHz and 5GHz wireless services have
exactly the same Name and same Password set in the above screen.
Channel Select the bandwidth for the network: 20MHz, 40MHz, or 80MHz (5GHZ only)
Bandwidth In high wireless activity/interference environment, reduce the bandwidth to
20MHz for greater stability.
Max. Connected Enter the maximum number of wireless devices able to simultaneously
Devices connect to the wireless network.
Usually this is 16 (default setting) for consumer devices.
ITEM DESCRIPTION
Device Isolation Select On to prevent devices on the wireless network being able to access WPS Mode Router to connect a wireless device using the Router PIN, see below.
each other, the wireless devices can only access the Internet.
Device to connect a wireless device using the Device’s PIN, see below.
The default Off setting allows every device connected to the router
(wirelessly or by cable) to be considered part of the same local network and Push Button to connect without a PIN using the physical WPS button on
can communicate with each other device (e.g. servers, printers, PCs, wireless the side of the Router.
devices, etc.) on that network.
WPS Connect When Router or Device WPS Mode is selected click this button to establish
This may result in security issues.
button the connection using the PIN you have previously entered.
Hide SSID By default, the NF18MESH broadcasts its service set identifier (SSID), or When Push Button is selected you can either use this button or the physical
network name, to nearby computers and other devices. WPS button on the side of the Router.
To improve the security of your network, select Hide SSID On to make it
harder to detect.
Authentication Select the Wireless security type to use with the wireless network.
The default is WPA2-PSK.
The NF18MESH also supports: WPA, WPA-PSK, WPA2, WPA2-PSK
Open and 802.1x are unsecure (no password required).
Encryption Select the type of Encryption suitable for the Authentication type.
Other encryption Depending on the Authentication and Encryption types selected, a range of
settings other settings will display.
You can have up to two phone lines each separately defined in the device’s configuration. You can connect a standard or cordless phone directly
into the RJ11 ports.
Your ISP will generally pre-configure TEL 1 port to work as the primary telephone port so it connects to their phone network. Your ISP will supply you
with your phone number. If the device is not pre-configured, then you will have to get the SIP details from your ISP and enter them into the form
illustrated here.
If the configuration is correctly set up and the router is connected to the internet, then the phone should work as soon as its plugged in.
ITEM DESCRIPTION
Note – Each VoIP port can only connect to one VoIP Account service, you cannot use both ports for the same VoIP account.
ITEM DESCRIPTION
SIP Proxy Port The port that this proxy is listening on. By default, the port value is 5060.
SIP Registrar Port The port that SIP registrar is listening on. By default, the port value is 5060.
SIP Outbound Proxy Click Enable if your network service provider requires the use of an outbound proxy.
This is an additional proxy, through which all outgoing calls are directed. In some cases, the outbound proxy is
placed alongside the firewall and it is the only way to let SIP traffic pass from the internal network to the Internet.
SIP Outbound Proxy Port The port that the outbound proxy is listening on.
By default, the port value is 5060.
Show / Hide buttons For additional Advanced Calling Features that may be supported by your ISP, click Show. See next section.
Advanced Calling Features Click Show to display the following Advanced Calling Features that may be supported by your ISP.
Call Waiting Click Enable if your VoIP Service Provider has enabled Call Waiting on your SIP account.
Call Return Click Enable if your VoIP Service Provider has enabled Call Return on your SIP account.
Call Transfer Click Enable if your VoIP Service Provider has enabled Call Transfer on your SIP account and you
wish to use this feature.
Call Conference Click Enable if your VoIP Service Provider has enabled Call Conferencing on your SIP account and
you wish to use this feature.
Call Forwarding Click Enable if your VoIP Service Provider has enabled Call Forwarding Unconditionally (i.e. no wait,
Unconditionally no busy signal, immediate forwarding) on your SIP account and you wish to use this feature.
Unconditionally Number Enter the phone number to forward a call to if the primary telephone number is busy.
Call Forwarding Busy Click Enable if your VoIP Service Provider has enabled Call Forwarding on your SIP account and you
wish to use this feature.
Busy Number Enter the phone number to forward a call to if the primary telephone number is busy.
Call Forwarding No Answer Click Enable if your VoIP Service Provider has enabled Call Forwarding on your SIP account and you
wish to use this feature.
No Answer Number Enter the phone number to forward a call to if the call is not answered.
Message Waiting indicator Click Enable if your VoIP Service Provider has enabled MWI (Message Waiting Indicator) on your SIP
account and you wish to use this feature.
Do Not Disturb Click Enable if your VoIP Service Provider has enabled DND (Do Not Disturb) on your SIP account
and you wish to use this feature.
Apply button Click to save and apply the changes you have made to these settings.
Examples of profiles defined for a workplace may include managers, HR, finance, warehouse, etc.
where each type of employee uses their connected device for similar activities.
Each device connected to the NF18MESH can be associated with one profile in the Current Profile
list.
If you add a new device and want specific access restrictions for it, Create a
new profile and Add the device to that profile.
Alternatively, if a current Profile has all the necessary restrictions, click the Edit Devices link for that
profile and Add the new device from either the Wired or Wireless Devices drop down menu.
Block Lists
Block lists are groups of websites that access restrictions can be assigned to and grouped in Block
Lists.
Users must type in keywords or URLs of sites to be blocked. Click on one of the eight Block Lists
and then click its Modify button.
Social Media, Video Streaming and Gaming are example Block List names.
Those names as well as User Defined 1, 2, 3 etc., can all be changed to something more suitable for
your circumstances.
Please note that the Block List function will not work on sites that use the HTTPS protocol.
Access Rules
Profiles For each Current Profile, click the Edit Rules for that profile to open the Rules definitions page.
Rules are defined for the device or group of devices included in the Profile, the restrictions available
Profiles define an individual or a group of devices that share the same internet access
include:
requirements. These devices could be used by members of a family or groups within a family, e.g.
teenagers, pre-schoolers, etc. Times when internet access is shut off completely
All of the devices connected to the NF18MESH that are accessed by teenagers in a
hypothetical household will be added to the Profile named Teenagers.
Scheduled Blocking
Scheduled blocking relies on the predefined Block Lists being populated with either keywords
or the URL of all related websites to be restricted.
Select a block list from the column on the left, then select Scheduled Blocking from its
drop-down menu, then select the relevant times in the
Timeslots table and then click the Apply Scheduled Blocking
button.
The selected timeslots (7:00pm to 9:00pm in our example) will be coloured light blue and
social media, videos and gaming will not be available at those times.
Permanent Blocking
To block all the websites defined in a Block List select it
from the column on the left, then select Permanent Blocking
from its drop-down menu and click the Save button.
In this example all websites listed in the Inappropriate Content
block list will be inaccessible at all times.
No visual indicator will appear on the Select Timeslots table.
Sharing Options
UPnP
Universal Plug and Play (UPnP) is a set of networking protocols that can allow networked devices, such as
computers, printers, gaming console, WiFi access points and mobile phones to automatically detect
each other's presence on the network and establish functional network services for data sharing,
communications, and entertainment.
Enable UPnP to allow automatic port forwarding configuration detection for your UPnP devices.
DLNA
DLNA (Digital Living Network Alliance) setting allows you to Enable and configure the digital media
server. This allows digital media stored on an external USB hard drive connected to the NF18MESH to
be accessible to other devices on your network.
Samba (SMB)
Enable the Samba Server Message Block (SMB) to access the USB content from other connected
Available Shares devices. Samba requires authentication. Enter a Username and Password and click the Apply button, the
Username will appear in the Current Users list.
The NF18MESH has one USB port located on the back of the router.
Multiple Samba users are supported.
Insert a USB and the following details will display:
To remove a user, click the button and then click the OK button in the confirmation dialog.
USB Device Name – The name given to the USB drive.
Please note that the NF18MESH only supports SAMBA version 1
USB File System – The NF18MESH supports: FAT16, FAT32, NTFS, EXT2 and EXT3 (Linux).
Routing
Configure and control the flow and routing of data in to and out of your
gateway.
Management
Enable and configure remote access and control for your gateway in a
secure environment and control the LED light display.
Local Network
Access all configuration options for IPv4, IPv6, VLAN and your wireless
services.
Phone
View and configure all the advanced features of your VoIP telephones.
System
Keep your system up to date and save your settings.
QoS
Precisely manage packet queues and port access to customise and
optimise data flow.
Security
Control access and set up firewalls to prevent intrusion or define filters
to allow specific access.
The first group of Device info describes the physical device and details of its hardware and software.
ITEM DEFINITION
Serial Number The unique set of numbers assigned to the routers for identification
purposes.
Build Timestamp The date and time that the software running on the router was
published.
Bootloader (CFE) Version The current boot loader version installed on the router.
DSL PHY and Driver Version The driver version of the on-board DSL chip.
DSL PHY and Driver Version The current line driver installed on the router.
Wireless Driver Version The current wireless driver installed on the router.
Uptime The number of days, hours and minutes that the router has been
running.
Line Rate – Downstream (Kbps) The current synchronisation upstream speed of the
DSL connection in Kbps (Kilobits per second).
LAN IPv4 Address The current IPv4 LAN IP address assigned to the
router.
Primary DNS Server The current primary DNS server in use Description The description of the WAN connection.
Secondary DNS Server The current secondary DNS server is use. Type The type of WAN connection.
LAN IPv6 ULA Address The current IPv6 LAN IP address in use if assigned. VLAN Mux ID Details the status of VLAN Mux ID, if used.
Default IPv6 Gateway The current IPv6 default gateway if assigned. IPv6 The status of IPv6.
Date/Time The current local date and time set on the router. IGMP Pxy Details the status of IGMP on each WAN connection.
IGMP is only used with IP v4 connections.
IGMP proxy enables the router to issue IGMP host messages on behalf of hosts
that the router discovered through standard IGMP interfaces, allowing NAT
transversal of Multicast traffic.
IGMP Source Details the status of IGMP Src on each WAN connection.
Enable IGMP Sources function send a membership report that includes a list of IGMP
source addresses.
MLD Pxy Shows the status of the Multicast Listener Discovery protocol when IPv6 is in use.
Multicast Listener Discovery (MLD) proxy enables the router to issue MLD host
messages on behalf of hosts that the router discovered through standard MLD
interfaces.
ITEM DEFINITION
MLD Source Details the status of MLD Src on each WAN connection. ARP
Enable MLD Sources function can send a membership report that includes a list of
The ARP table displays address resolution protocol information.
MLD source addresses.
Firewall The status of the router firewall across the WAN connection.
Route
The second table displays details of displays any routes that the router has created.
LAN
The Statistics – LAN page shows detailed information about the
number of bytes, packets, errors and dropped packets on each LAN
interface in both directions of communication.
INTERFACE DESCRIPTION
INTERFACE DESCRIPTION
xTM interface
The Statistics – xTM page shows details related to the xTM (ATM/PTM) interface of the router.
INTERFACE DESCRIPTION
In Octets The number of data packets in octets received over the ATM interface.
Out Octets The number of data packets in octets transmitted over the ATM interface.
In Packets The number of data packets received over the ATM interface.
Out Packets The number of data packets transmitted over the ATM
interface. The Statistics – xDSL page shows details related to the
In OAM Cells Operation, Administration, and Maintenance (OAM) Cell is DSL (Digital Subscriber Line) interface of the router.
the ATM Forum specification for cells used to monitor virtual
circuits.
In ASM Cells The number of Any Source Multicast (ASM) cells received
over the interface.
Out ASM Cells The number of Any Source Multicast (ASM) cells transmitted
over the interface.
In Packets Errors The number of packets with errors detected over the xTM
interface.
In Cell Errors The number of cells with errors detected over the xTM
interface.
Connection tests
This group contains the results of fourteen tests of various aspects of your connection to
your local network, the connection to your DSL service provider, and the connection to
your Internet service provider.
Note – Your Internet service provider must support diagnostics features in order for correct
DSL diagnostics results.
Diagnose the connection by clicking the Test button or click the Test With OAM F4
button.
The following results indicator buttons will display for each test:
Click Help to see the criteria for success for this test.
If after trying all the troubleshooting suggestions you are still experiencing a fail condition, contact your ISP Technical Support.
To trace a route, type in a Host Name or IP Address and click the Submit button.
Start/Stop DSL
This tool advises you of your DSL connection status: Up or Down
Ping Diagnostic If you DSL connection is down, check whether your phone line is connected.
The ping test lets you ping a remote IP address or hostname in order to test the connection.
Use the Stop or Start button to turn on or off the DSL service for troubleshooting purposes.
To ping, type in a Host Name or IP Address and click the Submit button.
System Log
To view the system log as it is currently configured, click the View System Log
button.
The results are displayed in a table in which each log record contains the following
data fields: Date/Time stamp, Facility, Severity and a Message
Securty Log The range of messages displayed can be defined, click the Configure System Log
button to access the display settings.
Cick the View button to display the security log.
It contains details of login attempts to the gateway. Save Security Log to file
Click the here link to save the current log file to a .txt
Click the Reset button to clear the existing records from the file.
log and reset the Security Log to record login attempts from The file will initially open in a browser page, click to
this point forward.. save as a .txt file.
Configure a System Log Log When enabled the system will begin to log all the selected events.
To configure the system log, click the Log Level The Log Level drop down list is arranged from most critical at the top
Configure System Log button. (Emergency), the lowest level event at the bottom (Debugging).
Emergency
Alert Select a Log Level and all events above or equal to the selected level
Critical will be logged to a log file.
When the desired values are selected
Error For example:
click Apply/Save to configure the
Warning If you select Error as your Log Level, all Emergencies, Alerts,
system log options.
Notices Critical events and Error messages will be included in the log file.
Informational Warnings, Notices, Informationals and Debugging messages will
Debugging not be logged.
Display Level Select a Display Level and, all logged events above or equal to the
selected level will be displayed on the System Logs page.
The range displayed is set using the same settings as described for
the Log Level settings, see previous item.
To view the System Logs page, click the View System Log button on
the Logs page:
Mode The default setting, Local, saves the log only to the local memory on
the NF18MESH.
The Remote mode allows you to save the log on a remote server.
If the selected mode is Remote you must specify the IP address and
UDP port of the remote syslog server to which the log will be sent.
If Both is selected you must specify the IP address and UDP port of
the remote syslog server and events will be recorded in the local
memory as well as the remote server.
Server IP Address Specify the IP address of the remote syslog server. (Remote and both only.)
Server UDP Port Specify the UDP port of the remote syslog server. (Remote and both only.)
Port Forwarding
Port forwarding allows you to direct incoming traffic from the WAN side to the Internal network host with a private IP address on the LAN side.
The table on the Port Forwarding page contains details of each Port Forwarding rule currently defined. You can define up to 32 rules
External Port Start The starting external port number (when custom server is selected). When Server IP Address The IP address of the local server.
a service is connected this field will be completed automatically.
WAN Interface Describes the type of target interface: ETH, WAN, VDSL, custom, etc.
External Port End The ending external port number (when custom server is selected). When
WAN Loopback Indicates current WAN Loopback status: Enabled or Disabled
a service is connected this field will be completed automatically.
Action buttons Toggle between: Enable and Disable
Protocol Options include: TCP, UDP or TCP/UDP
Delete button Click the Delete button to permanently remove a Port Forwarding rule.
Internal Port Start The starting internal port number (when custom server is selected). When a
service is connected this field will be completed automatically. Add button Click Add to open the Add Virtual Servers page.
Internal Port End The ending internal port number (when custom server is selected). When a
Click the Add button to create new Port Forwarding rules, see next page.
service is connected this field will be completed automatically.
Service Name Enter a descriptive name for the service that the rule will apply to.
LAN Loopback Select Enable to allow the LAN host to access another LAN host/server via the external
IP Address of the gateway.
When Disable is selected you must use the internal IP address of the device when on the
LAN side.
External Port Start Enter the starting internal port number range (when custom server is selected).
When a predefined service is selected this field will be completed automatically
External Port End Enter the ending internal port number range (when custom server is selected).
When a predefined service is selected this field will be completed automatically.
Internal Port Start Enter the starting internal port number range (when custom server is selected).
When a predefined service is selected this field will be completed automatically.
Internal Port End Enter the ending internal port number range (when custom server is selected).
When a predefined service is selected this field will be completed automatically.
The NF18MESH will forward IP packets from the Wide Area Network (WAN) that do not belong to any of
the applications configured in the Virtual Servers table or being used in the Virtual Server table to the
DMZ host.
Enter the DMZ Host IP address and click Apply to activate the DMZ host. To deactivate the DMZ Host
function, clear the IP address field and press the Save/Apply button.
LAN Loopback allows the LAN host to access another LAN host/server via the external IP Address of the
router.
Without NAT loopback you must use the internal IP address of the device when on the LAN side.
Important – This will present your DNZ device to the Internet without a router firewall.
This may create a security risk.
We recommend that you leave these protocols enabled unless you have a specific reason for disabling them.
ITEM DEFINITION
SIP Enable Session Initiation Protocol (SIP) is a signalling protocol used by communications applications and services between two or
more endpoints on IP networks.
TFTP Enable Select to allow Trivial File Transfer Protocol (TFTP) services. TFTP provides a simpler file transfer protocol that FTP using
UDP, without user authentications, etc..
H323 Enable H.323 is a protocol standard for multimedia communications that supports real-time transfer of audio and video data over
packet networks like IP.
IRC Enable Internet Relay Chat (IRC) is an application layer protocol that facilitates communication in the form of text.
Port Triggering Enable Port Triggering is a configuration option on NAT-enabled routers that provides access to services outside the network or on
the Internet.
PPTP Enable Point-to-Point Tunnelling Protocol (PPTP) is protocol used to implement virtual private network.
IPSec Enable Internet Protocol Security (IPsec) is a secure network protocol suite that authenticates and encrypts the packets of data sent
over an IPv4 network.
RTSP Enable Real Time Streaming Protocol (RTSP) is a network control protocol designed to establish and control streaming media
sessions in entertainment and communications applications.
SNMP Enable Simple Network Management Protocol (SNMP) is an application-layer protocol used to manage and monitor network
devices and their functions in a local area network (LAN) or wide area network (WAN).
Click the Apply / Save button to apply the changes to the settings.
Static Route
The Static Route table displays a list of the configured static routes.
Add Static Route
Click the Add or Delete buttons to add or remove static route definitions.
ITEM DEFINITION
Destination IP/Mask Enter the Destination Network Address and its subnet mask.
Gateway
Enter the Gateway IP Address and/or an available WAN Interface.
Interface
Metric The Metric field is used to set a priority for this route, the lower the number the
higher the priority.
Delete Select a Static Route row in the table and click the Delete button to permanently
delete that Static Route definition.
Add button Click the Add button to create a new Static Route definition, see the Add Static
Route screen on right.
This information allows the automatic creation and updating of routing tables.
ITEM DEFINITION
Interface The network interface that the RIP settings apply to.
Enabled Select Enable to activate the RIP routing service on the selected
Interface.
Apply/Save Click the Apply/Save button to save the changes and to initiate
button the change.
Attention – RIP cannot be selected for a WAN interface which is NAT enabled, such as PPPoE.
Go to Basic Setup and select Ethernet WAN, click Next and then select IP over Ethernet (IPoE). The RIP option will now be available.
When you have an Internet plan that provides a dynamic IP address (i.e. an IP address which is dynamically assigned and changes
each time you connect), an easy way to provide a permanent address is to use a Dynamic DNS service.
Add Dynamic DNS service
There are both free and paid DDNS services available.
ITEM DEFINITION
D-DNS provider When adding a Dynamic DNS server, see right, select your DDNS service provider from the D-DNS
provider drop down menu
The provider’s name will display in the Service column in the Dynamic DNS services list.
Interface Select the interface that the service operates on from the Interface drop down menu.
Username / Password Enter the Username and Password of your dynamic DNS account.
The Username will display in the Dynamic DNS services list.
Delete Click the Delete button to permanently remove the DDNS service from the list.
Add button Click the Add button to create a new DDNS service to include in the list.
To edit an existing DDNS service, click on its Hostname from the Dynamic DNS list. The Edit Dynamic DNS page appears. Make the changes and click the Apply/Save button.
TR-069 enables provisioning, auto-configuration or diagnostics to be automatically performed on your router if supported by your Internet Service Provider (ISP).
Important – Changing or removing these settings may cause you to lose ISP remote support and automatic firmware upgrade services.
Select Enable WAN Management Protocol (TR-069) to display the TR-069 settings.
ITEM DEFINITION
Inform interval Time in seconds that inform session data is sent to the Auto-Configuration Server (ACS).
WAN Interface used by TR- The interface connection used to send and receive data to the ACS server.
069 Client
Display SOAP messages on Select Enable to view the SOAP messages on a command prompt screen.
serial console
Get RPC Methods button Click to retrieve Remote Procedure Call (RPC) Methods.
To ensure appropriate security, this request must be authenticated using a Username and Password.
Select Connection Request Authentication to display the TR-069 security and connection settings.
ITEM DEFINITION
Connection Request Username Enter the username to be used by the ACS to initiate the connection for a TR-069
session with the NF18MESH.
Connection Request Password Enter the password to be used by the ACS to initiate the connection for a TR-069
session with the NF18MESH.
Connection Request Port Enter the Port number to be used by the ACS when connecting to the NF18MESH for a
TR-069 session.
Connection Request URL Enter the URL address to be used by the ACS for a TR-069 session with the NF18MESH.
ITEM DEFINITION
Read Community Enter the password to read device SNMP values or accept
the default: public
Set Community Enter the password to sset device SNMP values or accept the
default: private
Save/Apply button Click to save your settings and start the SNMP service.
ITEM DEFINITION
Username Enter the Username that you are currently logged in with.
Old Password Enter the password that you are currently logged in with.
New Password Enter a new password consistent with the requirements and
restrictions, see above.
Confirm Password Re-enter the new password exactly as in the previous field.
Save/Apply button Click to save your settings and start the SNMP services.
Requirements
Both username and password can between 1 to 16 characters.
Restrictions
Usernames and passwords cannot exceed 16 characters in length.
Use the LED Control settings to switch the display of the LED lights on or off.
ITEM DEFINITION
Off Select Off to turn off the display of the LED lights.
If the LED lights are currently on, click the Save/Apply
button for this change to take effect.
Save/Apply button Click to save and apply the settings made above.
Note that it will take a few seconds for the change to take
effect.
Subnet Mask Enter the subnet mask to define the subnet of the Local Network.
DHCP Start Range Enter the start IP address for the DHCP IP Address pool.
DHCP End Range Enter the end IP address for the DHCP IP Address pool.
Primary DNS Server Enter the IP address of the primary DNS server.
Secondary DNS Server Enter the IP address of the secondary DNS server.
DHCP Lease Time (Hour) Assigned IP addresses will be dropped after this time period and the
address may be assigned to a different device on the network.
Default is 24 hours.
Enable IGMP Snooping Enable IGMP (Internet Group Management Protocol) Snooping and select
the IGMP Snooping mode to use.
Standard Mode – Allows all multicast traffic to LAN clients.
Blocking Mode – Only allows multicast subscribed clients to receive
multicast packets.
Enable IGMP LAN to LAN Select Enable to allow IGMP snooping to multicasting between LAN side
Multicast clients.
Select Disable to turn off this functionality.
Enable LAN side firewall Enable the LAN side firewall to restrict traffic between LAN host-LAN hosts
and WiFi clients.
Enable DHCP Server Relay Disable the DHCP server defined above and relay requests to the external
DHCP Server IP Address When you select Enable DHCP Server Relay this text box becomes
available.
Enter the address of the external DHCP server that you want to use instead
of the DHCP server specified above. Note that it is no longer available.
Apply button Click to save your settings and start the SNMP services.
Use the DHCP Static IP Lease facility to reserve DHCP Addresses for specific hosts.
Click the Add Entries button to open the DHCP Static IP Lease dialog.
Enter the MAC Address of the chosen host and Static IP Address and the click the Apply/Save button.
To manage you lease list, click the Delete button to permanently remove a lease from the list.
Click the Add button to open the DHCP Option Setup dialog.
Select the State as Enable to allow custom DHCPcodes.
If the State as Disable the option will remain in the list, but no be active.
Enter a Code of 1 to 254.
Enter a Value, maximum length is 255.
Click the Apply/Save button to apply and save the changes.
To manage you option list, click the Delete button to permanently remove an option from the list.
Dynamic IP Addresses
By default, all physical interface on the NF18MESH have DHCP services Enabled.
Static IP Addresses
It is possible to set a "static" IP addresses which will never change.
ULA Prefix Advertisement Select On to enable the use of unique local addresses. The router
will advertise the IPv6 /64 prefix to new devices on the network.
Randomly Generate – Randomly generates the unique local
addresses and the prefix.
Statically Configure – Enter a static IPv6 address for the router if
one has been assigned to you by your Internet Service Provider (ISP).
Auto-Configuration When Stateful Auto-Configuration is selected, the following DHCP Lease Time (Hour) Assigned IP addresses will be expired after this time period and the
(continued) additional settings appear: address will be reassigned.
Start Interface ID – Enter the start address for the DHCPv6 IP Default is 24 hours.
Address pool. MLD Select On to enable MLD (Multicast Listener Discovery) snooping
End Interface ID – Enter the end address for the DHCPv6 IP
and select the MLD Snooping mode to use.
Address pool.
Leased Time (Hour) – Assigned IP addresses will be expired after Standard Mode – Allows all multicast traffic to LAN clients.
this time period and the address will be reassigned. Blocking Mode – Only allows multicast subscribed clients to
The default setting is 24 hours. receive multicast packets.
RADVD The Router Advertisement Daemon (RADVD) is used by system Enable MLD LAN to LAN Select Enable to allow the Multicast Listener Discovery (MLD)
administrators in stateless auto-configuration methods of network Multicast snooping function to constrain the flooding of IPv6
hosts on IPV6 networks.
multicast traffic on LANs on the router.
The Router Advertisement Daemon (RADVD) is used in stateless
auto-configuration on IPv6 networks. Select Disable to turn this functionality off.
The RADVD is an open-source software agent that allows link-local DHCPv6 Relay Select Enable to relay DHCP messages between DHCPv6 clients
advertisements of IPv6 router information using the Neighbour
and DHCPv6 servers on different IPv6 networks.
Discovery Protocol (NDP) as specified in RFC 2461.
The following DHCPv6 related settings are required:
When IPv6 hosts first connects, they broadcast router solicitation
DHCPv6 Server IP Address – Enter the relay destination.
(RS) requests onto the network to discover available routers. The
Selected WAN Interface – Select the type of interface to be used.
RADVD agent answers requests with Router Advertisement (RA)
messages. In addition, RADVD periodically broadcasts RA packets Hop limit – Set the number of hops (each time a data packet passes
to update network hosts. through a network device on its way from its source to its destination)
a packet is allowed before being discarded.
The router advertisement messages contain the routing prefix used
on the link, the link Maximum Transmission Unit (MTU), and the Apply button Click to save changes to your settings.
address of the responsible default router.
Select a LAN port Select the port you would like to enable VLAN settings.
Pbits Enter a value from 0-7 indicating the priority bits that dictates the
priority of the VLAN.
Remove button Select the checkbox in the Remove column for each of the VLAN
setups you want to permanently delete and then click the Remove
button.
Apply/Save button Click to save changes to your settings and refresh the current display.
Bridge Restrict Specify which wireless networks will be allowed to connect to the
NF18MESH by using the three Bridge Restrict options.
Enabled – Turns on the wireless bridge restriction. Only those bridges
entered or selected in Remote Bridges MAC Addresses will be
granted access.
Enabled (Scan) – Use this in conjunction with the Refresh button to
populate the Remote Bridges MAC Addresses with available bridges.
Disabled – Turns off the wireless bridge functionality.
Remote Bridges MAC If Bridge Restrict = Enabled enter the applicable MAC Addresses of
Address the other wireless access points.
If Bridge Restrict = Enabled (scan) then click the Refresh button to
scan for available bridges. Select the bridges from the scan results
table that you want to turn on.
Refresh button Works with the Bridge Restrict = Enabled (scan) setting, see above.
Click to update the remote bridges. Updating takes a few seconds.
Apply/Save button Click to save changes to your settings and refresh the current display.
Notes –
WPA/WPA2 encryption may not be compatible with other vendors, when operating in Wireless Bridge (WDS) mode.
Ensure that your SSID and security settings are identical with those on other bridge devices.
Select a frequency Select 2.4GHz or 5GHz to separately define the MAC Filter
settings for each.
Note that you must click the Apply/Save button before switching
frequencies or the changes made to the first will be lost.
MAC Restrict Mode Specify which wireless networks will be allowed to connect to the
NF18MESH by using the three Bridge Restrict options.
Disabled – This will keep the MAC Addresses that you have added
but turn off the MAC Filter functionality.
Allow – Select to allow the listed MAC Addresses access to the
wireless network.
Deny – Select to prevent the listed MAC Addresses from having
access to the wireless network.
MAC Address Click the Add button to include additional MAC Addresses in the list.
Delete button Click permanently remove the MAC Address from the list.
Notes –
While giving a wireless network some additional protection, MAC filtering can be circumvented by scanning a valid MAC and then spoofing one's own MAC into a validated one, using MAC Filtering may lead to a false sense of
security.
Your first line of defence to block access to your wireless network should be by changing your SSID and Wireless Security key.
On the Wireless Advanced Settings page select Advanced to access Extra settings when 802.11n/EWC set to ‘Auto’
the especially technical configuration settings of the wireless LAN
interface. For both channels when Auto is selected for the 802.11n/EWC setting ten
additional settings will appear on the Advanced settings page, refer to
the 802.11n/EWS = Auto section, below.
Setting for two Channels: 2.4 GHz or 5 GHz
Select 2.4 GHz or 5 GHz to separately define the advanced Extra setting when 802.11n/EWC set to ‘Disabled’
wireless settings for each wireless channel.
For both channels when Disabled is selected for the 802.11n/EWC setting
Once you have made the required changes and set the appropriate ten additional settings will appear on the Advanced settings page, refer
parameters, click the Apply/Save button to save the changes for that to the 802.11n/EWS = Disabled section, below.
channel and restart the wireless connection.
Extra 2.4 GHz settings when 802.11n/EWC set to
Common and Specific Settings ‘Disabled’
While both channels share 22 common settings, there are other settings When Disabled is selected for the 802.11n/EWC setting three additional
which apply to only one channel or the other and there are other settings settings become available only for the 2.4 GHz channel, refer to the 2.4
which apply only when the 802.11n/EWC setting is Auto. GHz 802.11n/EWS = Disabled section, below.
Channel Select the appropriate channel to correspond with your network settings.
All devices in your wireless network must use the same channel in order to work correctly.
This router supports auto channelling functionality (default setting).
The Current: channel number, together with the current level of detected interference, will be displayed on the
right
802.11n/EWC Select 802.11n/EWC (Enhanced Wireless Consortium) functionality to be either: Disabled or Auto
This settings will enable or disable 802.11n service, resorting to 802.11a/b/g service.
54g Rate Allows you to specify the maximum bandwidth of the 802.11g network.
Multicast Rate Select the multicast transmission rate in Mbps for the network. The rate of data transmission should be set
depending on the speed of your wireless network. Available settings are: Auto, 6, 9, 12, 18, 24, 36, 48, 54
Select Auto to have the Router automatically use the fastest possible data rate and enable the Auto-Fallback
feature. Auto-Fallback will negotiate the best possible connection speed between the Router and a wireless
client.
The default value is Auto.
Basic Rate Limits the connection minimum rate for 802.11a/b/g service.
Fragmentation Threshold Packets that are larger than this threshold are fragmented into multiple packets.
Increase the fragmentation threshold if you encounter high packet error rates.
Do not set the threshold too low, since this can result in reduced networking performance.
The default setting is: 2346
RTS Threshold The RTS Threshold is the minimum size in bytes for which the Request to Send/Clear to Send (RTS/CTS)
channel contention mechanism is used.
The router sends RTS frames to a particular receiving station and negotiates the
RTS Threshold sending of a data frame. After receiving an RTS, the wireless station Transmit Power use a lower setting in order to reduce the amount of interference.
Continued responds with a Clear to Send (CTS) frame to acknowledge the right to Continued The default setting is 100%.
begin transmission.
WMM (WiFi WMM (WiFi Multimedia) maintains the priority of audio, video and voice,
The RTS Threshold value should remain at its default setting (which is the
Multimedia) over other applications which are less time critical by ensuring that data
maximum value): 2347
from applications that require better throughput and performance are
In a network with significant radio interference or large number of wireless
inserted in queues with higher priority.
devices on the same channel, reducing the RTS Threshold might help in
Select whether WMM is: Auto, Disabled or Enabled
reducing frame loss.
Before you disable WMM, you should understand that all QoS queues or
DTIM Interval A DTIM (Delivery Traffic Indication Message) is a countdown informing traffic classes relate to wireless do not take effects.
clients of the next window for listening to broadcast and multicast
WMM No This setting is only available when WMM (WiFi Multimedia) is set to Auto
messages.
Acknowledgement or Enabled.
Enter a value between 1 and 255 seconds for the DTIM interval between
By default, the 'Ack Policy' for each access category is set to Disabled,
messages.
meaning that an acknowledgement packet is returned for every packet
Beacon Interval SSID information is broadcast in specific intervals. received. This provides a more reliable transmission but increases traffic
The beacon interval may be adjusted in milliseconds (ms). load, which decreases performance.
The default (100 ms) is recommended. Select Enabled to turn off the acknowledgement request. This can be
useful for Voice transmissions where speed of transmission is important
Global Max Clients Limits total number of simultaneously connected clients.
and packet loss is tolerable to a certain degree.
This is combined between Main AP and Guest AP.
WMM APSD This setting is only available when WMM (WiFi Multimedia) is set to Auto
XPress Technology Select Enable to turn on this is special frame-bursting accelerating
or Enabled.
technology for IEEE802.11g. The default is Enable.
WMM APSD (Automatic Power Save Delivery) is an improvement to the
Transmit Power Select: 20%, 40%, 60%, 80% or 100% 802.11e amendment adding advanced power management functionality to
The Power level sets the strength of the wireless signal that the gateway WMM.
transmits. Select Enabled to ensure very low power consumption.
If you live in an area where your wireless signal could overlap with other
wireless networks, or you deploys multiple Access points, use a lower
setting in order to reduce the amount of interference.
ITEM DEFINITION
Beamforming Transmission (BFR) Select SU (Single-User) BFR to enable gateway to direct transmission signal to the wireless client.
This may result in a better signal and potentially better throughput.
Beamforming Reception (BFE) Select SU (Single-User) BFE to allow reception of beamformed signal by the gateway.
Band Steering Select Enabled to detect if the client has the ability to use two bands. When enabled, the less congested 5GHz network is selected (by blocking the client's
2.4GHz network).
Note that band steering requires both WiFi bands to utilize same SSID (WiFi Network Name) and same password (WiFi Password) on both 2.4GHz and 5GHz.
Enable Traffic Scheduler Select Enabled to allow scheduling of traffic to improve efficiency and increase usable bandwidth for some types of packets by delaying other types.
Airtime Fairness Select Enabled to allow the gateway to manage the receiving signal with other devices.
The following wireless settings are always available regardless of channel and regardless of the 802.11n/EWC
setting.
ITEM DEFINITION
Bandwidth Select the bandwidth for the network: 20MHz, 40MHz, or 80MHz
Note that 80MHz is only available on 5GHz WiFi
In high wireless activity/interference environment, reduce the bandwidth to
20MHz for greater stability.
The Current: bandwidth will be displayed on the right.
Control Sideband If you select 20MHz in both bands you cannot select sideband and this drop-
down menu is disabled.
When you select the 40MHz bandwidth in both bands and manually select a
channel, the following options will appear: Lower or Upper
When you select Lower as the control sideband, the channel is 1~7.
When Upper, the channel is 5~11.
The Current control sideband (upper or lower) will be displayed on the right.
802.11n Rate Select the transmission rate for the 802.11n network. RX Chain Power Save This is the time interval (seconds) to wait before going into the power
Quiet Time save model.
You can select from a range of transmission speeds in the drop-down To set the quiet time, 802.11n/EWC, see first item in this section above,
menu, or you can select Auto to have the Router automatically select the must be set to Auto and RX Chain Power Save, see last setting, must be
best possible data rate and enable the Auto-Fallback feature. set to: Enable
Auto-Fallback will allow wireless client to fall back to 802.11a/b/g legacy Range in seconds: 0 to 2147483647
service.
RX Chain Power Save When RX Chain Power Save is enabled, set the RX Chain Power Save PPS
The default value is Auto.
PPS to the maximum number of packets-per-second (PPS) that the WLAN
802.11n Protection The 802.11n standards provide a protection method so 802.11b/g and interface should process for during RX Chain Power Save Quiet Time
802.11n devices can co-exist in the same network without “speaking” at before the RX Chain Power Save feature activates itself.
the same time.
Support 802.11n Client When On is selected, only stations that are configured in 802.11n mode
Only are supported, all legacy service (802.11a/b/g) is turned away.
Off will enable support for clients that are not 802.11n. Extra Advanced Wireless Settings when:
RIFS Advertisement Reduced Interframe Space (RIFS) is a new feature introduced in 802.11n 802.11n/EWS = Disabled
to improve efficiency.
For either the 2.4 GHz or 5GHz channel, if the 802.11n/EWS setting is set to Disabled one
OBSS Co-Existence Enable OBSS (Overlapping BSS) and the router automatically changes additional setting appears on the Advanced settings page.
the channel width from 40Mhz to 20Mhz to avoid interference with other
APs and then back to 40Mhz, if possible ITEM DEFINITION
RX Chain Power Save When the RX Chain Power Save feature is enabled one of the receive Afterburner Afterburner is a 125HSM (125 High Speed Mode) speed enhancement
chains will be turned off to save power. Technology technology for 802.11g/b
The current Power Save status: (Full Power or Low Power) will be
displayed on the right.
The default setting is: Enabled
ITEM DEFINITION
54g Mode For 54g mode, you can select Automatic, 802.11g Performance, or 802.11b Only. This option is
only visible when 802.11n mode is set as Disabled.
54g Protection When set to Automatic, the gateway will use RTS/CTS to improve the 802.11g performance in
802.11 mixed environments.
When set to Disabled, the 802.11g performance will be maximized under most conditions while
the other 802.11 modes (802.11b, etc.) will be secondary.
This option is only visible when 802.11n mode is set as Disabled.
Preamble Type If you are not using any 802.11b devices in your network, set the Preamble Type to Short for
optimum performance.
The Long Preamble type should be used when both 802.11g and 802.11b devices exist on your
network.
Preamble Type defines the length of the Cyclic Redundancy Check (CRC) block for
communication between the gateway and wireless clients. The preamble consists of the
Synchronization and Start Frame Delimiter (SFD) fields.
The sync field is used to indicate the delivery of a frame to wireless stations, to measure frequency
of the radio signal, to perform corrections if needed.
The SFD at the end of the Preamble is used to mark the start of the frame.
ITEM DEFINITION
In-Network Radar check Checks to avoid channels that contain radar systems.
Enter the number of seconds to check for radar when switching to a new channel after a network
has been established. Used for 802.11h only.
TPC Migration (db) TPC Mitigation settings will reduce wireless transmission power to prevent interference with radar
stations.
Enter the Transmitter Power Control (TPC) mitigation setting in decibels (db) as: 0(off), 2, 3 or 4
The default is 0(off)
Iperf Support Select Enable if you want the NF18MESH to run the IPerf server application used by your ISP to
measure network speeds. Only enable if instructed to do so by your ISP.
Default setting: Disable
Video Error Correction Settings include: RX Auto Enable Decode, RX Disable Decode, TX Enable Sequencer, TX Enable
Sequencer (IPTV Mode), TX Enable Encode, TX Enable Encode (IPTV Mode)
ITEM DEFINITION
Interface Selecting
Bound Interface Select the correct Bound Interface Name from your Internet WAN Service Connection or
Name you can select or Any_WAN
Fax Setting
Bypass Codec Select the codec used for FAX sending, check with your VoIP Provider for codec and FAX
over VoIP support.
Select: G711_A, G711_MU or T.38
Settings
Enable T38 If you wish to send or receive faxes via VoIP and have a fax machine capable of using the
Redundancy Support T38 fax over VoIP protocol select this function to enable T.38 Codec redundancy. T.38
packet payloads are repeated for each packet.
Enable VAD Enables the Voice Activated Detection (VAD) function of the modem. When enabled, no
redundancy support data is transmitted during periods of silence or low volume, reducing the data usage.
Enable RTCP Flow RTP Control Protocol (RTCP) provides out-of-band statistics and packet control
Control information for an RTP session.
Enable Echo Enable to improve voice quality and network capacity by preventing echo from being
Cancellation created or removing it after it is already present.
ITEM DEFINITION
Digitmap Setting The VoIP Dialplan specifies how to interpret digit sequences dialled by the user, and how to
convert those sequences into an outbound dial string.
For more information refer to the Configuring a VoIP dial plan section on the next page.
QoS Setting
DSCP for SIP Select a specific Differentiated Services Code Point (DSCP) priority tag for Quality of Service
(QoS) to SIP packets, the default: DEFAULT(00000)
DSCP for RTP Select a specific Differentiated Services Code Point (DSCP) priority tag for Quality of Service
(QoS) to RTP packets, the default: DEFAULT(00000)
Ethernet Priority Mark Assign and tag packets with Class of Service (CoS) for Quality of Service at the media access
control (MAC) level according to IEEE 802.1p. A value of 0-7 is accepted.
Set -1 to disable CoS QoS.
Payload Setting
RFC2198 Payload Value Defines the RTP Payload size for Redundant Audio Data according to RFC2198 in lossy network
connections.
Enter a value between 97 to 127, or accept the default of 125
Dtmf Relay setting Select the signalling method for relaying Dual-tone Multi-frequency Relay Settings: InBand
(default, used when the other two are not available), RFC2833 or SIPInfo
Call ID Setting
Caller ID send Delay Time Defines the delay after initial ring before CPE sends Caller ID to phone handsets.
Enter a value in milliseconds (ms) between 500 to 1500ms, or accept the default of 600ms
Caller ID Message Type Defines the Signalling method for sending caller id to phone handsets to display.
Select a Caller ID Message Type: FSK_SDMF, FSK_MDMF or DTMF
FSK modulation Mode Select the optimal Frequency-shift keying modulation mode: BellcoreGen, V23Gen or V23UK
Transport Setting Select the appropriate SIP Transport protocol: UDP or TCP
SIP Extends Select the appropriate PRACK (100rel) setting: Supported (default), Disabled or Required
Service Offer Setting Select your Complementary business model: Local, Server, IMS or undefined
Rules
Dial plan example: Australia Dial Plan
Below are some rules for configuring a dial plan:
000|[*#]X[0-9*]|*#X[0-9*]|00[1-
Separate strings with a | (pipe) character. 9]XX.t|014XXXXXXX|016XXXXXX|0192X|0198XXXXXX|0[23478]XXXXXXXX|0500XXXXXX
|11XX|123X|124XX|1251XX|1252XXX|1255X|1258XXX|1271X|130XXXXXXX|13[1-
Use the letter X to define any single numeric digit.
9]XXX|1802XXX|189XX|1[8-9]XXXXXXXX|[2-9]XXXXXXX
Use square brackets to specify ranges or subsets, for example:
Settings
To create a file containing all of your local NF18MESH settings select Advanced > System > Settings, then select Backup and then click the
Backup Settings button.
The backup configuration file will be saved to your browser’s designated Downloads folder.
The backup configuration file will have a .conf file extension.
The default filename is: backupsettings.conf
We recommend that you give you backup settings file a meaningful name.
To use a previously saved backup settings file to reinstate those settings on your PC select Advanced > System > Settings, then select Update.
Click the Choose File button and select a previously saved backup settings file (file extension .conf).
Then click the Update Settings button to over-write the current settings with the previously saved ones.
To restore the NF18MESH to its factory default settings, select Advanced > System > Settings, then select Factory Reset.
Click the Restore Default Settings button.
A confirmation dialog will appear, click OK to restore the factory settings.
Note – If your device was not obtained from your ISP, contact NetComm Support.
The tools on this page allow you to use the Network Time Protocol (NTP) to configure specific time servers to synchronise time, set local time zones, etc. for the modem.
The time servers are correct to within a few milliseconds of Coordinated Universal Time (UTC), also known as Greenwich Mean Time (GMT).
ITEM DEFINITION
Current Router Time The current router time as per the settings in this page.
Automatically Synchronize The router will periodically poll the designated NTP servers and confirm the correct
time.
First NTP Server Enter the address of your primary Network Time Protocol (NTP) server.
Second NTP Server Enter the address of your secondary Network Time Protocol (NTP) server (optional, but
recommended).
Enable Daylight Savings Time Coordinated Universal Time or Universal Time Coordinated (UTC) is not adjusted for
daylight saving time.
To display the Current Router Time in the actual local time where Daylight Savings
Time in in effect, select Enable Daylight Savings Time.
ITEM DEFINITION
Number of Queues
Name Add a meaningful name so that you can readily identify the queue.
The maximum number of queues that can be
Key System-generated sequential reference number.
defined depends on the type of connection:
Interface Select an interface for the queue. Options include: LAN1~4 or eth4(wan) • In ATM mode, a maximum of 16 queues
can be configured.
Qid Indicates the priority of the queue for the selected interface.
• In PTM mode, a maximum of 8 queues
Prec/Alg/Wght Indicates the Precedence, Algorithm and Weight used for calculating the priority of the queue. can be configured.
• For each Ethernet interface, there is a
DSL Latency Path0(fast) or Path1(interleaved). This is selected while creating Interface. The default is: Path0
maximum of 4 queues that can be
PTM Priority Defines how PTM traffic packets should be handled. During congestion High priority traffic gets priority over Low. configured.
• For each Ethernet WAN interface, there
Shaping Rate (bps) The speed you would limit the queue to in bps (bits per second) after the burst size.
is a maximum of 8 queues that can be
Set the initial max speed traffic size before shaping the speed. This will allow packets such as Web Pages to load without
configured.
being shaped, but allowing shaping to larger packets such as files transfer
Burst Size (bytes) Set a maximum size for traffic to be sent in.
Add button To create a new queue, click the Add button and define the queue in the Add Queue window, see next page.
Enable button Unselect Enable to disable the application of a queue rule without deleting it from the list.
You can then later Enable to the queue rule without needing to redefine it.
Delete Button To permanently remove a queue rule, click the Delete button. You will be not be prompted to confirm this.
View Wlan Queue Setup Click to open the View WLAN Queue Setup page, see next page.
Edit Queue
To edit an existing queue, click on its Name and a page similar to the Add Queue page, see above,
All of the settings were previously described in the QoS Queue Setup page description, see page
will display.
84.
Enter your changes and click the Apply/Save button.
A traffic class rule consists of a class name and at least one condition. All of the specified conditions in a classification rule must be satisfied for the rule to take effect.
To view your existing class rules, or to create a new one, open the Advanced menu and click the Classification link in the QoS section.
To edit a QoS Classification rule, click on its Class Name. Enter your changes
and click the Apply/Save button.
To create a new rule, click the Add button and define the rule in the Add
Network Traffic Class Rule page, see next section.
Traffic Class Name Enter a name (max 15 characters) reflecting the priority of the defined rule, for example: PC1HighPriority
Class Interface Set the Class Interface according to how the device connects to the router.
Options are: LAN, Wireless, Local and USB
Source MAC Address Enter the Source MAC Address of the device, the unique 12-character signature with every 2 characters
separated by a colon (:), that you previously entered to reserve the device's IP address.
Source IP Address Enter the Source IP Address of the device that you previously entered into the Static IP Lease List, in the range
of 192.168.1.x
Destination MAC Address Enter a Destination MAC Address if the connection is to a single device. This is useful for VPN connections.
If you wish the destination MAC address to be any address leave the field blank.
Destination IP Address Enter a Destination IP Address if the connection is to a single device. This is useful for VPN connections.
If you wish the destination IP address to be any address leave the field blank.
Destination Subnet Mask Enter a Destination Subnet Mask if you have entered a Destination MAC address and Destination IP address.
This would normally be 255.255.255.0 unless your system administrator advises otherwise.
If you have not entered a Destination MAC or IP address leave the field blank.
Differentiated Service Code Point Set the Differentiated Service Code Point (DSCP) Check to EF(101110).
(DSCP)
Protocol Set the Protocol to TCP. Other options include UDP, ICMP or IGMP.
Assign Classification Queue Set Priority 1 for the highest priority with priority 3 being the lowest. Priority 2 is in between
Mark Differentiated Service Code Set Mark Differentiated Service Code Point (DSCP) as AF11(001010)
Point (DSCP)
Mark 802.1p Priority The scale 0~7, with 6 and 7 are reserved for networking performance.
Set 5 as the highest priority, set 0 for lowest priority.
Apply/Save button Click to save the new Network Class Traffic Rule.
Time window = Burst size / rate Interface Identifies the interface type.
For example. if a 200 Mbps bandwidth limit is configured with a 5 ms burst window, the
Type Identifies the connection type.
calculation becomes 200 Mbps x 5 ms = 125 Kbytes, which is approximately eighty-three
(83) 1500-byte packets. Shaping Rate (Kbps) The speed you would limit the port to in Kbps (Kilobits per second) after the
If the 200 Mbps bandwidth limit is configured on a Gigabit Ethernet interface, the burst burst size.
duration is 125000 bytes / 1 Gbps = 1 ms at the Gigabit Ethernet line rate.
Burst Size (bytes) Burst size should be more than 10x MTU (>=15000 bytes).
Result
Apply/Save button Click the Apply/Save button to save and apply your changes.
After 1ms of burst data at full gigabit speed, the speed is shaped to 200Mbps.
The router provides two types of IP filtering: Outgoing IP Filtering and Incoming IP Filtering
Outgoing IP Filtering
By default, the router allows all outgoing Internet traffic from the LAN but by setting up Outgoing IP Filtering rules, you can block some users and/or applications from accessing the Internet.
The Outgoing IP Filtering Setup page contains a table of all currently defined outgoing IP filters and their details.
To create a new outgoing IP filter, click Add. The Add-Outgoing IP Filter page will be displayed.
ITEM DEFINITION
IP Version Select the IP version to apply the filter to: IPv4 or IPv6
Protocol Select the protocol type to block: UDP/TCP, UDP, TCP or ICMP
Source IP Address Enter the IP Address of the host on the LAN to be blocked.
(/prefix length) Note that you must also enter the prefix length and not the subnet mask.
Source Port Enter the port number used by the application to be blocked or a range of ports that the
(port or port:port) application to be blocked would be using.
Leave blank to block all ports from this source.
Destination IP Address Enter the IP Address of the Remote Server/host to which connections should be blocked.
(/prefix length) Leave blank to block all ports to this destination.
Note that you must also enter the prefix length and not the subnet mask.
Filters must contain at least one condition. Destination Port Enter the destination port number used by the application to be blocked or a range of ports that
A rule will only be effective if all the conditions specified in the filter (port or port:port) the application to be blocked would be using.
rule are satisfied.
Apply/Save button Click to save and activate the new filter.
The new rule will then be displayed in the Outgoing IP Filtering Setup table list.
To edit an Outgoing IP Filter rule, click on its Filter Name. Enter your changes and click the Apply/Save button.
To delete a rule from the Outgoing IP Filtering Setup table, click its Delete button.
The Incoming IP Filtering Setup page contains a table of all currently defined Incoming IP filters and their details.
To create a new Incoming IP filter, click Add. The Add-Incoming IP Filter page will be displayed.
ITEM DEFINITION
IP Version Select the IP version to apply the filter to: IPv4 or IPv6
Protocol Select the protocol type to block: UDP/TCP, UDP, TCP or ICMP
Source IP Address Enter the IP Address of the Remote Server/Host from which to allow connections.
(/prefix length) Note that you must also enter the prefix length and not the subnet mask.
Source Port Enter the port number used by the application to allow or a range of ports that the application
(port or port:port) to be allowed would be using.
Leave blank allow all ports from this source.
Destination IP Address Enter the IP Address of the Host on the LAN to which connections should be allowed.
(/prefix length) Leave blank allow all ports to this destination.
Note that you must also enter the prefix length and not the subnet mask.
Destination Port Enter the destination port number used by the application to allow or a range of ports that the
(port or port:port) application to be allowed would be using.
WAN/LAN Interfaces Select one or more (or Select All) WAN/LAN interfaces displayed below to apply this rule:
Filters must contain at least one condition.
(Configured in Routing Select All
A rule will only be effective if all the conditions specified in the filter mode and with firewall
rule are satisfied. ETH WAN/eth4.1
enabled)
ADSL_8_35/pppoa0
br0/br0
To delete a rule from the Incoming IP Filtering Setup table click its Delete button.
To create a new Incoming IP filter, click Add. The Add-Incoming IP Filter page will be displayed.
ITEM DEFINITION
Protocol Type Select the protocol type to which the filter should apply:
• PPPoE (Point-to-Point Protocol over Ethernet)
• IPv4
• IPv6
• Apple Talk
• IPXNetBEUI (NetBIOS Extended User Interface)
• IGMP (Internet Group Message Protocol)
Destination MAC Address Enter the MAC address of the device that the NF18MESH will be blocked from
accessing.
Source MAC Address Enter the MAC address of the device that the NF18MESH will block from external
communication.
ITEM DEFINITION
IPSec Connection Name Enter a meaningful name to identify the IPSec tunnel.
Remote IPSec Gateway Enter the IP Address of the IPSec accessible IPSec End-Point to connect to.
Tunnel access from Local Select the Local Network address or host address to which IPSec is connected.
IP Address from VPN Enter the IP Address to be used locally for the IPSec tunnel.
Subnet mask for VPN Enter the subnet mask of the local network address to which the IPSec connects to.
Tunnel Access from Remote Select which Network address or Host address to which the remote IPSec endpoint is connected to.
IP Address for VPN Enter the IP Address to be used on the remote end for the IPSec tunnel.
Subnet mask for VPN Enter the subnet mask of the remote network address to which the IPSec connects to.
Key Exchange Method Select the type of IPSec exchange is to be used on the IPSec tunnel.
Authentication Method Select the applicable authentication for the IPSec tunnel.
Pre-Shared Key Enter the pre-shared key (if applicable) to grant access to the IPSec tunnel.
Perfect Forward Secrecy Select to use Perfect Forward Secrecy during key exchange for the IPSec tunnel.
Advanced IKE Settings Configure advanced IKE settings for the IPSec tunnel such as the encryption method or key lifetime.
To edit an existing IPsec connection, click the Connection Name in the IPSec Tunnel Mode Connection list. Its IPSec Tunnel Mode Connections
setting page will open. Make the necessary changes and click the Apply/Save button.
Note – NF18MESH IPSec will only support Site to Site Tunnel connections. It will not support IPSec Transport mode.
Open the Advanced menu and click the Access Control link in the Security section.
2 Click the Add button to add a specific address to the restricted list.
To permanently remove an address from the list, click the Delete button to its right.
The following access services are available: HTTP, HTTPS, TELNET, SSH, FTP, TFTP, ICMP, SNMP
and SAMBA
Click the Apply/Save button after making any changes to continue. Note – If both http and https is disabled on LAN and WAN you will lose access to the NF18MESH
configuration pages.