HLK-RM02 User Manual: Shenzhen Hi-Link Electronic Co.,Ltd
HLK-RM02 User Manual: Shenzhen Hi-Link Electronic Co.,Ltd
HLK-RM02 User Manual: Shenzhen Hi-Link Electronic Co.,Ltd
,Ltd
Tel:0755-83575155 Fax:0755-83575189
All rights reserved. Thank you for your selection of network equipment
manufacturers hi-links wireless broadband router products! Before you use, please read
this manual carefully, understand the function of the basic configuration. In addition, you
can also log on to our website www.hlktech.com for more product information
1.Product summarize
Product Feature
Integrates router, wireless access point, four-port switch and firewall in one
Complies with IEEE802.11n, IEEE802.11b and IEEE802.11g standards
MIMO technology utilizes reflection signal to increase eight times transmission distance
of original 802.11g standard and reduces the "dead spots" in the wireless coverage area
Provides 150Mbps transmission rates
Supports WMM to make your voice and video more smooth
Supports 64/128-bit WEP, WPA, WPA2 encryption methods and 802.1x security
authentication standards
Supports remote/local Web management
Supports wireless Roaming technology and ensures high-efficient wireless connections
Supports wireless SSID stealth mode and MAC address access control
Supports Auto MDI/MDIX
Provides system log to record the status of the router
Supports MAC address filtering, NAT, NAPT
Supports UPnP and DDNS
Supports the access control over 30 MAC addresses
Supports DHCP server/client
Supports SNTP
Supports auto wireless channel selection
Supports WDS function (wireless distribution system)
2Software Configration
a. Basic Configurations
1) Search the wireless network,connect to HLK-WR01
2)Set the IP addressYou can set staic IP or you can enable DHCP. Set your IP address
through the properties of Internet Protocol (TCP/IP). Generally, the
DHCP server of the router is on, so please select Obtain an IP address automatically
andObtain DNS server address automatically under the General tab.
Tips:
Only when the DHCP server of the router is enabled should you select Obtain an IP
addressautomatically. You can set the IP address by yourself instead. However, the IP
address of thecomputer and router should be set within the same subnet and may not
share an IP address. Thedefault IP address is 192.168.16.254 and the subnet mask is
255.255.255.0, so the IP address should not be 192.168.16.254.
3) You can find the assigned address under the Support tab as follows:
5) To access the Routers Web-based Utility, launch a web browser such as Internet
Explorer or Firefox and enter the Routers default IP address, http://192.168.16.1. Press
Enter. Please input the admin in both User Name and Password. Click OK.
1. Quick Set-Up
The router supports various functions and provides a quick setup The wizard can
guide youto finish the basic setting, even though you may be unfamiliar with the router.
1Click on Quich Setup in the left margin and click on Next in the right margin under
Quick setting. This will start the procedure for setting the router
3You can set a network name and corresponding encryption security for your
wireless network settings, as shown below. Click on the Apply button to submit the setting
information. The system will then reboot the computer to complete the router basic
setting.
Operation Mode
HLK-WR01 series wireless broadband router as a powerful router, it supports bridge
mode and gateway mode, default mode is gateway
Bridge mode:
The router acts as an AP when operation mode is set to bridge mode. Also, the WEB
managing function and all RJ-45 ports on the rear panel serve as LAN ports. Until now,
the router has been acting only as a switch. It has been unable to access the WAN and
the firewall has been disabled.
Gateway mode:
Gateway is the default mode. It is used to enable the NAT function to enable the
router to transmit information easily with the Internet
Ethernet Converter:
The wireless interface is treated as WAN port, and the ethernet ports are LAN ports
AP Client
This mode the router is a AP,can connect to other wireless router also it can establish
another wireless network,The RJ45 is LAN.This function can be used to make your
wireless more farther.
2Internet settings
2.1. WAN Connection Mode:
This router supports several common methods of WAN connections. Select the
connection method to what your network operator uses and select the correct parameter
information (likely provided by your ISP). Then, you can share the Internet normally. If you
use dynamic connection,3G dial-up connection. PPPoE dial-up connection, etc., there are
two ways to verify whether the connection will work. One way is to browse the web site
In this screen, fill the network address information from your ISP in the IP Address, Subnet
Mask, Gateway and Primary DNS server fields.
IP Address: Here enter the WAN IP address provided by your ISP.
Subnet Mask: Enter the WAN Subnet Mask here.
Gateway: Enter the WAN Gateway here.
Primary DNS Server: Enter the Primary DNS server provided by your ISP.
Secondary DNS Server: Enter the secondary DNS
MAC Address:The Routers physical MAC address as seen on your local network,
which is unchangeable.
IP Address:The Routers LAN IP address (not your PCs IP address). Once you modify
the IP address, you need to remember it for the Web-based Utility login
next
time.
192.168.16.1 is the default value
Subnet Mask: Its shown the Routers subnet mask for measurement of the network
size. 255.255.255.0 is the default value
DHCP Server: Activate the checkbox to enable DHCP server
Wireless Settings
3.1 Basic Settings
Radio On/Off:On: the wireless router will radio Off:the router will not radio
Wifi On/Off:The router will broadcast the ssid if turn on.Turn Off means hide the ssid
Network Mode: Supports 802.11b/g mixed, 802.11b, 802.11g and 802.11b/g/n mixed
modes.
Multiple SSID: Main Service Set Identifier. Its the "name" of your wireless network.
Minor SSID: Minor Service Set Identifier. It is optional.
Broadcast (SSID): Select enable to enable the device's SSID to be visible by wireless
clients.
BSSID: It is a 48bit identity used to identify a particular BSS (Basic Service Set) within an
area. In Infrastructure BSS networks, the BSSID is the MAC (Medium Access Control)
address of the AP
Channel: From the drop-menu, it is for selecting the working channels of the wireless
network. Please select from 1 to 13,or select AutoSelect to select different channels.
Channel BandwidthSelect wireless work frequency 20M or 20/40M.
HT TxStream: RF Transmit Stream.
HT RxStream: RF Receive Stream.
3.WPA2-PSK (Wi-Fi Protected Access version 2), It's more secure than Wired
Equivalent Privacy (WEP) and easy to set up.
WPA Algorithms: Select key Algorithms such as TKIP, AES and TKIP&AES.
Pass Phrase: Enter the key which must have 8-63 ASCII characters.
Key Renewal Interval:
Enter the key renewal period. It is to tell the Router how often
to change the keys.
4.WPA
This Authentication protocol based on RADIUS server. This security mode is used when a
RADIUS server is connected to the Router.
Radius IP Address: Please input IP address of the radius server here.
Radius Port: Please input the port number of the radius server here.
Shared key:The encryption key that the router is authenticated through RADIUS server
Session Timeout: The recertification time interval between the router and the server. The
default value is 3600s.
5. WPA2
This security mode is also used when a RADIUS server is connected to the Router.
WPA Algorithms: Select key Algorithms such as TKIP and AES.
Radius IP Address: Please input IP address of the radius server here.
Radius Port: Please input the port number of the radius server here.
Shared key:The encryption key that the router is authenticated through RADIUS server
Session Timeout: The recertification time interval between the router and the server. The
default value is 3600s.
6.802.1X
This security mode is used when a RADIUS server is connected to the Router. 802.1x, a
kind of Port-based authentication protocol, is an authentication type and strategy for users.
The port can be either a physic port or logic port (such as VLAN). For wireless LAN users,
a port is just a channel. The final purpose of 802.11x authentication is to check if the port
can be used. If the port is authenticated successfully, you can open this port which allows
all the messages to pass. If the port isnt authenticated successfully, you can keep this
port disable which just allows 802.1x authentication protocol message to pass.
WEP: Select enable/disable WEP encryption which indicates the authentication process
between wireless adapter and wireless router.
Radius IP Address: Please input IP address of the radius server here.
Radius Port: Please input the port number of the radius server here.
Shared key: The encryption key that the router is authenticated through RADIUS server
Session Timeout: The recertification time interval between the router and the server. The
default value is 3600s.
NOTE: To improve security level, do not use those words which can be found in
a dictionary or too easy to remember! Wireless clients will remember the WEP key,
so you only have to input the WEP key on wireless client once, and its worth to use
complicated WEP key to improve security level.
3.4 WDS
Click on Wireless Settings | WDS, enter your wireless distribution system interface to
enablethe WDS, or select the WDS (Wireless Distribution System) mode. WDS opens the
WDS function on the radio equipment, establishes the WDS trust and communication,
extends the expansion wireless signal, and enables wide wireless network coverage.
Note: In order to use this function, the users must all be equipped with the WDS function
and must all be WDS members. Also, the channel of each transmission point must not set
the automatic channel choice. The same channel and same working mode are required to
be set at each transmission point. WDS member machines are located in different IP
addresses of an identical network segment. If the DHCP function is needed, enable just
one of the machines and disable other DHCPs. Use the identical product brand (model
and series) to obtain better compatibility and to enable the connection for as long as
possible.
All HLK-WR01 products support 3 modes: Lazy ModeBridge Mode, and Repeater
Mode.
Lazy Mode
There is no need to fill in the BSSID of the opposite party in this mode. The WDS
connection is now a passive connection, so the other party should fill in the BSSID
address of the router. This means that the WDS mode of the other partys machine can
only be in a non-Lazy mode (Bridge or repeater mode). Also, the WDS connections of the
machines must be in the same physical mode, they must be on the same wireless channel
(not on Auto), and they must have the same wireless encryption type (not supporting the
Mix encryption type like WPAPSKWPA2PSK). The machines must each have unique IP
addresses on the same network. Open only DHCP function;close other DHCP function.
Phy Mode: Select the supporting Physical mode (CCK, OFDM, or HTMIX). The
same physical mode must exist for all of the connecting equipment.
Encrypt Type:Select NONE (no encryption type). There are 3 types: WEPTKIP
Temporal Key Integrity Protocoland AES (Advanced Encryption Standard). You can set
a maximum of 4 different types and can use these types to connect to 4 different clients.
Note: The sameencryption type must exist for all of the equipment to the connection to be
established.
Encrypt Key: Input a new key here after choosing the encryption type.
Bridge Mode
The Bridge mode requires the BSSID of the other client to be filled in. The AP SSID of
this router will be shielded so that the wireless client will not be able to determine this
router. The wired client can use a WAN port to access the Internet.
Phy ModeSelect the supporting physical mode (CCK, OFDM, or HTMIX). The same
physical mode is required for all connecting equipment.
Encrypt TypeSelect NONE (no encryption type). There are 3 types: WEP, TKIP
Temporal Key Integrity Protocol, and AES (Advanced Encryption Standard). You can
set a maximum of 4 different types and can use these types to connect to 4 different
clients. Note: The same encryption type must exist for all connecting equipment in order to
establish a connection.
AP MAC address: Fill in the BSSID of the WDS connecting equipment. You can fill in 4
different BSSIDs in order to enable one-to-many connections.
Repeater Mode
You have to input the BSSID of the connected equipment. Either a wireless client or a
wired client (not a bridge) can connect to the network in the WDS mode.
3.5WPS
WPS (Wi-Fi Protected Setup) is a standard to establish an easy and secure wireless
client and router. It is created by the Wi-Fi Alliance, so you dont need to choose the
encryption type or to set the key. You can set the WPS by inputting the right PIN code or
by pressing the WPS/RESET button on the panel.
WPS Config: Select the Enable or Disable WPS function. You need to enable the WPS
before you can use the WPS button on the panel to set the PBC encryption. (The default
is Disabled.)
WPS Summary: This displays the parameters of the current WPS settings, including:
WPScurrent status, SSID, authentication mode, encryption type, AP PIN, etc.
Reset OOB: Click this button to restore all WPS configurations to the default value.
WPS Progress: It supports 2 ways to configure WPS settings: PBC (Push-Button
Configuration) and PIN (Personal Identification Number).
PBC: Select PBC or press the WPS button on the panel of the Router to 1 second. The
WPSindicator will blink, allowing you to enable the client to implement the WPS/PBC.
PIN: You have to know the PIN code of the client for this option. Fill in the code and save it
anduse the same code for the client.
WPS Status: It displays the WPS current status. There are 3 states:
WSC Idle: It shows that the WPS current status is free.
WSC Start WSC Process: It shows that the WPS current status is sending a message.
WSC Success: It shows that access of the client to AP is successful and that a WPS
connection has been established.
4Firewall
4.1. MAC/IP Binding
Input the MAC and IP of the need to control equipment , when this equipment get IP
is different form set the IP , this equipment will be unable to access to the network, and
when the equipment get IP and set the IP consistent are the same, but MAC is different,
this equipment will be unable to access the network also
MAC/IP/Port Filtering:If you want to enable this function, select Enable. (The default is
Disable.)
Default PolicyYou can state that packets that dont match any rules are to be dropped
or accepted.
MAC addressEnter the MAC address for which you want to define a rule.
Dest IP AddressEnter the destination IP address you want to filter.
Source IP AddressEnter the source IP address you want to filter.
ProtocolSelect a protocol to control data packages.
Dest Port RangeEnter the destination IP address you want to control. The start port
number must not be greater than the end port number.
Source Port Range: Enter the source IP address you want to control. The start port
number must not be greater than the end port number.
Action: Drop or accept the defined rule.
Comment: Describe the rule.
Virtual Server Settings: Enable or Disable the virtual server. (The default is Disabled.)
IP address: Enter the IP address of the internal network which you want to set as a virtual
server (like 192.168.16.254).
Port Range: Server port range of the host in the internal network (like 80).
4.4 DMZ
The DMZ host is the default virtual server. Its priority is lower than that of a virtual
server.When a wireless router receives a connection request from an external network,
the router scans the server list according to the number of the server port. If there is a
matching port, it sends this request to the corresponding virtual server. If there is not, it
checks for a matching DMZ host and sends a request to it; if it cant find the host, it
abandons the request. As for a detailed setting, you only need to fill in the host IP address,
choose Enable, and click on Apply to save it.
Note: If you enable the DMZ function, this host will be exposed in the WAN, which
would compromise its security. When you set the DMZ function, ensure that the number of
port that is accessed is the same as the number of the port which the DMZ host enables.
Webs Content Filter:Select appropriate filter rules according to your demand. There are
3 types of filters:
Proxy: Filter out web pages offered by agencies.
Java: Filter out Java in web pages.
Active-X: Filter out Active-X controls in web pages.
Current Webs URL Filtrates (filters): It is the set rule of URL filters. If you wish, you can
delete the rule: select it and click on the Delete button.
Add a URL filter: Enter the URL address you want to filter. Click on the Add button to
prohibit a website from being accessed. The new URL filter will appear at the top of the
5.Administration
5.1. Management
In the left pane, click on Administration | Management to set configurations such as:
language,administration account, password, current time, NTP (Network Time Protocol),
and DNS server
Select Language: Choose one of 3 languages and click on the Apply button to finish the
language setting.
Account: Enter a new user name for the device. (The default is admin).
Password: Enter a new password. (The default is admin.)
Click on the Apply button. The system will reboot and then ask you to enter the changed
Update Firmware: Click on Browse to choose the latest firmware file for the router. Click
on the Apply button to upgrade it. The firmware will upgrade and then the system will
reboot.
Update Boot loader: Click on Browse to choose the latest system-loader program file for
the router and then click on the Apply button to update it.
Important Note: Do not turn off the power or disconnect the network from the router while
the router is upgrading, otherwise the process may hang up or the equipment may get
damaged.
Export Settings Click on Export to export the current system settings to a certain point.
The file name is the default value and cannot be changed.
Import Settings: Click on Browse to see the directory to which you exported the system
setting files, choose the file, and then click on the Import button and reboot the system.
Load Defaults: Click on this button to reset all of the configurations to the default values,
which means that you will lose all of the settings you previously set for the router. The
system will then reboot.
Note: Please save the current configurations before importing another configuration file or
restoring factory settings
5.4 Status
In the left pane, click on Administration | Status to see on this page: SDK version,
system uptime, system platform, operation mode, Internet configurations, and local
network.
5.5 Statistics
Click Administration | Statistics in the left pane to see the current system memory
usage and the number of packets sent and received on the WLAN, LAN and WAN
networks