ZyXEL Communications MAX-306M1 инструкция обслуживания

www .zyxel.com www .zyxel.com MAX-306M1 Series Models: MAX-306M1 (2.5 GH z) and MAX-316M1 (3.5 GHz) Copyright © 2009 ZyXEL Communications Corporation Firmware V ersion 3.70 Edition 1, 12/2009 Default Login Details IP Address: http://192.168.1.1 User Name: admin Pa s s w o r d : 1 2 3 4 WiMAX MIMO Out door Simple CPE[...]

[...]

About This User's Guide User’s Guide 3 About This User's Guide Intended Audience This manual is intended for people who w ant to configure the Z yXEL WiMAX Modem using the web configurator . Y ou should have at least a basic knowledge of TCP/ IP networking concepts and topology . Note: This book covers the following models: MAX-306M1 an[...]

Document Conventions User’s Guide 4 Document Conventions W arnings and Notes These are how warnings and notes are shown in this User’ s Guide. W arnings tell you about things that could harm you or your WiMAX Modem. Note: Notes tell you other import ant informat ion (for e xample, other things you may need to configure or help ful tips) or reco[...]

Document Conventions User’s Guide 5 Icons Used in Figures Figures in this User’ s Guide ma y use the following generic icons. The WiMAX Modem icon is not an exact repres entation of your WiMAX Modem. T able 1 Common Icons WiMAX Access Point Computer Wireless Signal Notebook Server WiMAX Base Station T elephone Switch R outer Internet Cloud Int[...]

Safety Warnings User’s Guide 6 Safety Warnings For your safety , be sure to read and follow all wa rning notices and instructions. • Do NO T use this product near water , for example, in a wet basement or near a swimming pool. • Do NO T expose your device to dampness, dust or corrosive liquids. • Do NO T store things on the device. • Do N[...]

Safety Warnings User’s Guide 7 • Make sure t hat the cable system is grou nded so as to provide some prot ection against voltage surges. Y our product is marked with this symbol , which is known as the WEEE mark. WEEE stands for W aste Electronics and Elec trical Equipment. It means that used electrical and electroni c products should not be mi[...]

Safety Warnings User’s Guide 8[...]

Contents Overview User’s Guide 9 Contents Overview Introduction and Wizards ................................................... ................................................... 29 Getting S tarted ............. ............. ................ ................ ............. ................ ............. ........... ............ 31 Introducing t[...]

Contents Overview User’s Guide 10[...]

Table of Contents User’s Guide 11 Table of Contents About This User's Guide ..................................................... ................................................... .. 3 Document Conventions.................................................................. ......................................... .4 Safety Warnings ........[...]

Table of Contents User’s Guide 12 Chapter 4 V oIP Connection Wizard...................................................................................... ................... 47 4.1 Overview ... ... .... ... ... ... ............. .... ... ... ... ... ............. .... ... ... ... .... ... ............. ... ... ... .... ... .... ............ 47 4.[...]

Table of Contents User’s Guide 13 7.1.2 What Y ou Need to Know .............. .... ... ... ... .... ... ... ............. ... ... .... ... ... ... .... ............ .... ... 73 7.2 DHCP Setup ................. ... ... ... ............. ... .... ... ... ... ............. .... ... ... ... ... ............. .... ... ... ... .. ........ 74 7.3 S tati[...]

Table of Contents User’s Guide 14 10.1 Overview ................. ............. ................ ............. ................. ............ ................. ........ ......... 109 10.1.1 What Y ou Can Do in This Chapter .... .......... ................ ............. ................ ............. . 109 10.2 General ...... ................. ...[...]

Table of Contents User’s Guide 15 12.4.6 NA T and SIP .............. ................ ................. ............. ................ ................ .............. 14 6 12.4.7 DiffServ ............................. ............. ................ ............. ................ ................ ........ ... 1 46 12.4.8 DSCP and Per-Hop Behavior [...]

Table of Contents User’s Guide 16 15.4.1 Certificate Authorities ........... ............. ... ................ ............. ................ ............. ........ 184 15.4.2 V erifying a Certificate .............. ................ ................. ................ ................ ............. . 186 Chapter 16 The Firewall Screens ..........[...]

Table of Contents User’s Guide 17 19.2 General ...... ................. ............. ................ ............. ................ ............. ................ .... .......... 215 19.3 Class Setup ................ ................ ............. ................ ............. ................ ................ .... ....... 216 19.3.1 Class Con[...]

Table of Contents User’s Guide 18 Appendix B Setting Up Y our Computer ’s IP Address ........................................................... 271 Appendix C Pop-up Windows, JavaScripts and Java Permissions ...................................... 299 Appendix D IP Addresses and Subnetting ................................................ ......[...]

List of Figures User’s Guide 19 List of Figures Figure 1 Mobile S t ation and Base S tation ..... ... ... ............. ... ... .... ... ... ... ............. ... .... ... ... ... ............. . ......... 31 Figure 2 WiMAX Modem’s V oIP Feat ures - Peer-to-Peer Calls ... ................ ................ ................ .......... 32 Figure 3[...]

List of Figure s User’s Guide 20 Figure 39 ADV ANCED > VPN T ransport > Customer Inte rface Setup .......... ................. ................ . 1 03 Figure 40 Ethernet Pseudowire Se ttings Example ............... ................. ............ ................. ............ ..... 1 05 Figure 41 Advance > VPN Transport > Ethernet Ps [...]

List of Figures User’s Guide 21 Figure 82 TOOLS > Firewall > Service Setting ..... ............. ............. ............. ................ ............. ......... .. 193 Figure 83 “T riangle Route” Pr oblem ...... ............. ................ ................ ............. ................ ............ ........ . 196 Figure 84 IP A[...]

List of Figure s User’s Guide 22 Figure 125 Mac OS X 10.5: Apple Menu ......... ...... ....... ............. ................ ............. ................ .......... .... 283 Figure 126 Mac OS X 10.5: Systems Preferences ... ....... ............. ................ ............. ................ ........... 28 3 Figure 127 Mac OS X 10.5: Network [...]

List of Figures User’s Guide 23 Figure 168 Internet Explorer 7: Select Certificat e S tore ..... ............. ... .... ... ... ... ............. ... .... ... ... ... ... .... .3 2 5 Figure 169 Internet Explorer 7: Certificate I mport Wizard ..... ............. ................ ................. ................ . 3 26 Figure 170 Internet Explore[...]

List of Figure s User’s Guide 24[...]

List of Tables User’s Guide 25 List of Tables T able 1 Common Icons ......... ................ ................ ................ ............. ................ ................. .. ................... 5 T able 2 The WiMAX Modem . ............. ................ ................ ............. ................ ................ ........... ......... [...]

List of Tables User’s Guide 26 T able 38 ADV ANC ED > System Configuration > G eneral .... ................. ................ ................ .............. 121 T able 39 ADV ANC ED > System Configuration > Dy namic DNS . ................... ................ ................ ..... 123 T able 40 ADV ANC ED > System Configuration &g[...]

List of Tables User’s Guide 27 T able 81 QoS Clas s Setup .......................... ................ ................ ............. ................ .............. ............ . 2 17 T able 82 Syslog Logs ..................... ................ ................ ............. ................ ................ ....... ............ ..... 2 20 T abl[...]

List of Tables User’s Guide 28 T able 124 24-bit Network Number Subnet Planning .................... ................... ................ ................ ..... 3 1 6 T able 125 16-bit Network Number Subnet Planning .................... ................... ................ ................ ..... 3 1 7 T able 126 Commonly Used Services . ... ... .[...]

29 P ART I Introduction and W izards Getting Starte d (31) Introducing the W eb Configur ator (35) Internet Connecti on Wizard (41) V oIP Connection Wizard (47)[...]

30[...]

User’s Guide 31 C HAPTER 1 Getting Started 1.1 About Y our WiMAX Modem The WiMAX Mode m allows you to access th e Internet by connecting to a WiMAX wireless network. Y ou can use a traditiona l analog telephone to make Internet calls using the WiMAX Modem’ s V oic e o ver IP (V oIP) communication capabilities. Y ou can configure firewall and co[...]

Chapter 1 Getting Started User’s Guide 32 Use content filtering to block access to web sites with URLs containing keywords that you specify . Y ou can define time periods and days during which content filtering is enabled and include or exclud e particular computers on your network from content filtering. For example, you could block access to ce[...]

Chapter 1 Getting Started User’s Guide 33 1.2 WiMAX Modem Hardware Fol low the instructions in the Quick Start Guide to mak e hardware connections. 1.2.1 LEDs The following figure shows the LE Ds (lights) on the WiMAX Modem. Figure 4 The WiMAX Modem’s LEDs The following table describes y our WiMAX Modem’ s LEDs (from right to l eft). T able 2[...]

Chapter 1 Getting Started User’s Guide 34 1.3 Good Habit s for Managing the Device Do the following things regularly t o ma ke the WiMAX Modem more secure and to manage the WiMAX Modem more effectively . • Change the password. Use a password t hat’s not easy to guess and that consists of different types of char acters, such as numbers and let[...]

User’s Guide 35 C HAPTER 2 Introducing the Web Configurator 2.1 Overview The web configurator is an HTML -based management interface that allows easy device set up and management via any web browser that supports: HTML 4.0, CSS 2.0, and Ja vaScript 1.5, and higher . The recommended screen resolution for using the web configurat or is 1024 by 768 [...]

Chapter 2 Introducing the Web Configur ator User’s Guide 36 4 A password screen displays. The defa ult password (“1234”) displays in non- readable characters. If y ou haven’t chan ged the password y et, you can just click Login . Click Cancel to revert to the default password in the password fi eld. If you have changed the password, en ter [...]

Chapter 2 Introducing the Web Configurator User’s Guide 37 6 A screen displays to let you choose to g o to the Wizard or the Adv anced screens. •C l i c k Go to Wizard setup if you are log ging in for the first t ime or if you want to make basic changes. The wizard selection screen appears after you click it. See Chapter 3 on page 41 for more i[...]

Chapter 2 Introducing the Web Configur ator User’s Guide 38 2.2 The Main Screen When you first log into t he web configurator and by-pass the wizard, the Main screen appears. Here you can view a su mmary of your WiMAX Modem connection status. This is also the default “home” pa ge for the Z yXEL web configurator and it contains conveniently -p[...]

Chapter 2 Introducing the Web Configurator User’s Guide 39 The following table describes t he labels in this screen. VOICE Click to go to the V oice screen, where you can configure y our voice service and phone settings. TOOLS Click to go the T ools screen, where you can configure your firewall, QoS, and content filter , among other things. ST A [...]

Chapter 2 Introducing the Web Configur ator User’s Guide 40 Software V ersion This field indicates the version number of the WiMAX Modem’ s firmware. The version number takes the form of: Version(Build),release status (candidate) | Version Release Date . For example: V3.70(BCC.0)c4 | 07/08/2009 indicates that the firmware is 3.70, build BCC.0, [...]

User’s Guide 41 C HAPTER 3 Internet Connection Wizard 3.1 Overview This chapter provides information on the Z yXEL Setup Wizard screens. The wizard guides you through several steps where you can configure your Internet and V oIP settings. 3.1.1 W elcome to the ZyXEL Setup Wizard This is the welcome screen for the Z yXEL Setup Wizard. Y ou can cho[...]

Chapter 3 Int ern et Co nn e ctio n Wiza rd User’s Guide 42 3.1.2 System Information This Internet Connection Wizard screen allows you t o configure your WiMAX Modem’s system information. The settings here correspond to the ADVANCED > System Configuration > Gene ral screen (see Section 11.2 on page 121 for more). Figure 7 Internet Connect[...]

Chapter 3 Internet Connection Wizar d User’s Guide 43 3.1.3 Authentication Settings This Internet Connection Wizard screen allows you to configure y our Internet access settings. The setting s here correspond to the ADVANCED > WAN Configuration > Internet Connection screen (see Section 8.2 on page 88 for more information). Figure 8 Internet[...]

Chapter 3 Int ern et Co nn e ctio n Wiza rd User’s Guide 44 Anonymous Identity Enter the anonymous id entity provided by your Internet Service Provider . Anonymous identity (also known as outer identity) is used with EAP- TT LS encryption. The anonymous identity is used to route y our authentication request to the correct authentication server , [...]

Chapter 3 Internet Connection Wizar d User’s Guide 45 3.1.4 IP Address This Internet Connection Wi zard screen allows you to configure y our IP address. The settings here correspond to the SETUP > Set IP Address scre en ( se e Section 6.2 on page 66 ). A fixed IP address i s a static IP that yo ur ISP give s you. A n au to m atic (dyn amic ) I[...]

Chapter 3 Int ern et Co nn e ctio n Wiza rd User’s Guide 46 3.1.5 Setup Complete Click Close to complete and save th e Int ern et Connecti on Wi zard se ttings. Figure 10 Internet Con nection Wizard > Complete Launch your web browser and navigate to www .zyx el.com . If ev erything w as configured properl y , the web page should display . Y ou[...]

User’s Guide 47 C HAPTER 4 VoIP Connection Wizard 4.1 Overview This chapter shows you how t o use the wi zard to set up your voice account(s). The WiMAX Modem has V oice o ver IP (V oIP) communicati on capabilities that allow you to use a t raditional analog telephone to make Internet calls. Y ou can configure the WiMAX Modem to us e up to two SI[...]

Chapter 4 VoIP Connection Wizard User’s Guide 48 4.2.1 First V oice Account Settings This V oIP Connection Wizard screen all ows you to c onfigure your v oice account. The settings here correspond to the VOICE > Service Configuration > SIP Setting screen (see Section 12.2 on page 133 for more information). Figure 12 V oIP Connection > Fi[...]

Chapter 4 VoIP Connection Wizard User’s Guide 49 After you enter y our voice account sett ings and click Apply , the WiMAX Modem attempts to register y our SIP account with the SIP server . Figure 13 V oIP Connection > SIP Registration T est This screen displays i f SIP account registration f ails. Check your WiMAX connection using the WiMAX L[...]

Chapter 4 VoIP Connection Wizard User’s Guide 50 Internet connection was already working, you can click Back and t ry re-entering your SIP accoun t setti ngs. Figure 14 V oIP Connection > SIP Registration Fail 4.2.2 Setup Complete Click Close to complete and s ave th e V oIP Connec t io n setting s . Figure 15 V oIP Connection > Finish This[...]

User’s Guide 51 C HAPTER 5 Tutorials 5.1 Overview This chapter shows you how t o configur e some of the WiMAX Modem’ s features. Note: Be sure to read Introducing the Web Con figurator on pa ge 35 before working through the tutorials presented here. For fi eld de scriptions of individual screens, see the related technical ref erence in this Use[...]

Chapter 5 Tutorials User’s Guide 52 Required : The following table provides a su mmary of the information you will need to complete the tasks in this tutorial. 1 In the W eb Confi gurator , open the SETUP > Set IP Address screen and set the IP Address to 192.168.100.1. Use the default IP Subne t Mask of 255.255.255.0. 2 Open the ADVANCED > [...]

Chapter 5 Tutorials User’s Guide 53 6 Next, go to the ADVANCED > NAT Configuration > General scr ee n and select the Enable Network Address Translation option. 7 Click Apply to save your se t tin gs . 8 Connect your computers to the WiMAX Mode m’ s Ethernet po rts and you’re all set! Note: Y ou may need to configure the computers on you[...]

Chapter 5 Tutorials User’s Guide 54 2 In the Import Certificate screen, click Browse and locate the security certificate that was prov ided by your new ISP . 3 Next, go to the ADVANCED > WAN Configuration screen and configure your new Internet access settings based on the information provided by your ISP . Note: Y ou can also use the Internet [...]

Chapter 5 Tutorials User’s Guide 55 5.2.3 Blocking W eb Access During Specific Hours I f yo u r W i M A X M o d e m i s i n a h o m e o r o f fice environment you may deci de that you want to block web access and video chat duri ng a s pecific block of hours, such as during your daughter’ s designat ed study hours. Goal : Configure the WiMAX Mo[...]

Chapter 5 Tutorials User’s Guide 56 3 Under Available Services , sele ct HTTP(TCP:80) then click the Add button. Repeat this for CU-SEEME (TCP/UDP:7648,24032) . This blocks all web and video chat traff ic, while leaving other ports open for other types of tr affic, such as ports 25 and 587 for e-mail and port 21 for FTP . The Blocked Services win[...]

Chapter 5 Tutorials User’s Guide 57 5.2.4 Blocking W eb Sites by Keyword Y ou can further refine web access by spec ifying keywords that appear in a URL and blocking them. This allows you to control the content y ou do allow to pass through the WiMAX Modem. For example, on ce your daughter’ s designated study hours end, you allow web access and[...]

Chapter 5 Tutorials User’s Guide 58 3 Enter the first Keyword then click Add . R epeat for additional keywords. As you enter them, the k eywords appear in the Keyword List . 4 (Optional) If you w ant to allow websites with these keywords for a spec ific computer in your househo ld, such as th e computer in the ma ster bedroom, then add that compu[...]

Chapter 5 Tutorials User’s Guide 59 5.3 Configuring Y our Internet Phone This tutorial shows you how to conf igur e the WiMAX Modem’ s V oIP settings when you connect an analog phone to place Internet phone calls. Goals : Connect an analog phone to the WiMAX Modem then configure your Internet phone settings. Figure 16 Phone Call Example In this[...]

Chapter 5 Tutorials User’s Guide 60 1 Connect an analog phone to your Wi MAX Modem, as described in the included Quick Start Guide. 2 Open the VOICE > Service Config uration > SIP Setting screen, then enter the required informatio n as presented above. T ip: Unless otherwise told by a SIP service provider , you can often leave t he Port set[...]

Chapter 5 Tutorials User’s Guide 61 5.3.1 Placing an Internet Phone Call Because you’re using an analog phone, you can’t just enter another party’ s SIP number and dial straig ht away . The reason is there is no way to enter certain SIP- specific characters on y our analog ph one’ s ke ypad in a way that the WiMAX Modem will recognize. As[...]

Chapter 5 Tutorials User’s Guide 62 5.4 Remotely Managing Y our WiMAX Modem The remote management feature allows you to log into the device ov er the Internet and configure its settings f rom a second trusted location. Goal : Set up the WiMAX Modem to allo w management request s from the (demonstrat ion) IP address 2.2.2.2. See Also : Chapter 18 [...]

63 P ART II Basic Screens The Main Screen (38) The Setup Screens (65)[...]

64[...]

User’s Guide 65 C HAPTER 6 The Setup Screens 6.1 Overview Use these screens to configure or view LAN, DHCP Client and WAN setti ngs. 6.1.1 What Y ou Can Do in This Chapter •T h e Set IP Address screen ( Section 6.2 on page 66 ) lets you configure the WiMAX Modem’ s IP address and subnet mask. •T h e DHCP Client screen ( Section 6.3 on page [...]

Chapter 6 The Setup Screens User’s Guide 66 you entered. Y ou do not need to change the computer subnet mask unless y ou are instructed to do so. Daytime A network protocol used by devices fo r debugging and time measurement. A computer can use this protocol to set its in ternal clock but only if it know s in which order the year , mo nth, and da[...]

Chapter 6 The Setup Screens User’s Guide 67 The following table describes t he labels in this screen. 6.3 DHCP Client Click the SETUP > DHCP Client to view connection information for all client s that have been configured by the WiMA X Modem’ s internal DHCP server . Figure 18 SETUP > DHCP Client The following table describes t he labels [...]

Chapter 6 The Setup Screens User’s Guide 68 6.4 T ime Setting Click SETUP > Time Setting to set t he date, t ime, and time zon e for the Wi MAX Modem. Figure 19 SETUP > T ime Setting The following table describes t he labels in this screen. Res e r v e This indicates whether the IP address for the connected client device is reserved. When t[...]

Chapter 6 The Setup Screens User’s Guide 69 6.4.1 Pre-Defined NTP T ime Servers List The WiMAX Modem uses a pre-defined l ist of NTP time servers if you do not specify a time server or it cannot synchr oniz e with the time server you specified. It can use this list regardless of the time protocol you sel ec t . When the WiMAX Modem uses the list,[...]

Chapter 6 The Setup Screens User’s Guide 70 the list in order until either it is success ful or all the pre-def ined NTP time servers have been tried. 6.4.2 Resetting the T ime The WiMAX Modem automatically resets th e time in the following circumstances: • When the device starts up, such as when you press t he Power button. • When you click [...]

71 P ART III Advanced Screens The LAN Configuration Screens (73) The WAN Configur ation Screens (85) The NA T Configur ation Screens (109) The System Configur ation Screens (119)[...]

72[...]

User’s Guide 73 C HAPTER 7 The LAN Configuration Screens 7.1 Overview Use the ADVANCED > LAN Configuration screens to set up the WiMAX Mod em on the LAN. Y ou can configure DHCP se rvices and con t rol ho w the WiMAX Modem sends routing information using RIP . A Local Area Network (LAN) is a shared communicat ion system to which many computers[...]

Chapter 7 The LAN Configuration Screens User’s Guide 74 Subnet Masks Subnet masks determine th e maximum number of possible hosts on a network. Y ou can also use subnet masks to divide one network into multiple sub-networks. DNS DNS (Domain Name System) is for mapping a domain name to its corresponding IP address and vice v ersa. The DNS se rver [...]

Chapter 7 The LAN Co nfiguration Scr eens User’s Guide 75 The following table descri bes the labels in this screen. T able 13 ADV ANCED > LAN Configuration > DHCP Setup LABEL DESCRIPTION DHCP Setup Enable DHCP Server Select this if you want the WiMAX Mo dem to be the DHCP server on the LAN. As a DHCP server , the WiMAX Modem assigns IP addr[...]

Chapter 7 The LAN Configuration Screens User’s Guide 76 7.3 S t atic DHCP Click ADVANCED > LAN Configuration > Static DHCP to assign specific IP addresses to specific computers on the LAN. Note: This screen has no effect if the DHCP server is not enabled. Y ou can enable it in ADV ANCED > LAN Configuration > DHCP Setup . Figure 21 ADV[...]

Chapter 7 The LAN Co nfiguration Scr eens User’s Guide 77 7.4 IP S t atic Route Click ADVANCED > LAN Configuration > IP Static Route to look at the static routes configured in th e WiMAX Modem. Note: The first static route is the default route and cannot be modified or deleted. Figure 22 Advanced> LAN Configurat ion > IP S tatic Route[...]

Chapter 7 The LAN Configuration Screens User’s Guide 78 7.4.1 IP S t atic Route Setup Click an Edit icon in ADVANCED > LAN Configuration > IP Static Route to edit a static route in the WiMAX Modem. Figure 23 Advanced> LAN Configuration > IP S tatic Route Setup The following table describes t he labels in this screen. T able 17 Advance[...]

Chapter 7 The LAN Co nfiguration Scr eens User’s Guide 79 7.5 Other Settings Click ADVANCED > LAN Configuration > Other Settings to set the RIP and Multicast options. Figure 24 ADV ANCED > LAN Configuration > Other Settings The following table describes t he labels in this screen. Apply Click to save your changes. Cancel Click to retu[...]

Chapter 7 The LAN Configuration Screens User’s Guide 80 7.6 T echnical Reference The following section contains additional technical information about the WiMAX Modem features describ ed in this chapter . 7.6.1 IP Address and Subnet Mask Similar to the way houses on a street sh are a common street name, computers on a LAN share one common network[...]

Chapter 7 The LAN Co nfiguration Scr eens User’s Guide 81 Onc e you have d eci de d on the net wor k nu mbe r , p ick an I P ad dre ss t hat is e asy to remember , for instance, 192.168.1.1, for yo ur WiMAX Modem, but make sure that no other device on your network is using that IP address. The subnet mask specifies the network number portion of a[...]

Chapter 7 The LAN Configuration Screens User’s Guide 82 7.6.4 DNS Server Address DNS (Domain Name System) is for mapping a domain name to its corresponding IP address and vice v ersa. The DNS se rver is extremely important because without it, you must know the IP addre ss of a machine before you can access it. The DNS server addresses that you en[...]

Chapter 7 The LAN Co nfiguration Scr eens User’s Guide 83 • None - the WiMAX Modem will not send an y RIP packets and will ignore any RIP packets receiv ed. The Version field controls the format and th e broadcasting method of the RIP packets t hat the WiMAX Modem sends ( it recognizes both formats when receiving). RIP-1 is unive r s a ll y sup[...]

Chapter 7 The LAN Configuration Screens User’s Guide 84[...]

User’s Guide 85 C HAPTER 8 The WAN Configuration Screens 8.1 Overview Use the ADVANCED > WAN Configuration screens to set up y our WiMAX Modem’ s Wide Area Network (W AN) or Internet features. A Wide Area Network (or W AN) links geog raphically dis pers ed locations to other networks or the Internet. A WAN configuration can include switched [...]

Chapter 8 The WAN Configuration Screens User’s Guide 86 for example). The following figure show s an MS-equipped notebook computer MS1 moving from base stati on BS1 ’ s coverage area and connecti ng to BS2 . Figure 25 WiMax: Mobile S tation WiMAX technology uses r adio signals (aro und 2 to 10 GHz) to connect subscriber stations and mobile stat[...]

Chapter 8 The WAN Configuration Screens User’s Guide 87 Authentication When authenticating a user , the base station uses a third-p arty RADIUS or Diameter server known as an AAA (Au thentication , Auth orizat ion and Ac counting) server to authenticate t he mo bile or subscriber stations. The following figure shows a base s tation using an AAA s[...]

Chapter 8 The WAN Configuration Screens User’s Guide 88 8.2 Internet Connection Click ADVANCED > WAN Configuration t o s e t u p y o u r W i M A X M o d e m ’ s I n t e r n e t settings. Note: Not all WiMAX Modem models have all the fields shown here. Figure 28 ADV ANCED > W AN Configuration > Internet Connection The following table de[...]

Chapter 8 The WAN Configuration Screens User’s Guide 89 PKM This field displays the Priv acy K ey Management ve rsion numb er . PKM provides security between the WiMAX Modem and the base station. At the time of writing, the WiMAX Modem supports PKMv2 only . See the WiMAX security appendix for more information. Authentication This field displays t[...]

Chapter 8 The WAN Configuration Screens User’s Guide 90 8.3 WiMAX Configuration Click ADVANCED > WAN Configuration > WiMAX Configuration to set up the frequencies use d by your WiMAX Modem. In a WiMAX network, a mobile or subsc r iber station must use a radio frequency supported by the base station to commu nicate. When the WiMAX Modem look[...]

Chapter 8 The WAN Configuration Screens User’s Guide 91 Radio f requency is measured in Hertz (Hz). Figure 29 ADV ANCED > W AN Configuration >WiMAX Configuration The following table describes t he labels in this screen. T able 20 Radio Frequency Conversion 1 kHz = 1000 Hz 1 MHz = 1000 kHz (100000 0 Hz) 1 GHz = 1000 MHz (1000000 kHz) T able [...]

Chapter 8 The WAN Configuration Screens User’s Guide 92 8.3.1 Frequency Ranges The following figure shows the WiMAX Mode m searching a r ange of frequencies to find a connection to a base station. Figure 30 Frequency Ran ges In this figure, A is the WiMAX frequency r ange. “W iMAX frequency r ange” refers to the entire range of frequencie s t[...]

Chapter 8 The WAN Configuration Screens User’s Guide 93 Note: It may t ake several minutes for the WiMAX Modem to find a conn ection. • The WiMAX Modem searches the DL Frequency settings in ascending numerical order , from [1] to [9] . Note: The Ba ndwid th field is not user-configurable; when the WiMAX Modem finds a WiMAX connection, its frequ[...]

Chapter 8 The WAN Configuration Screens User’s Guide 94 4 In the DL Frequency [4 ] field, enter 2625000 . Leave the rest of the DL Frequency fields at zero. The screen appears as follows. Figure 31 Completing t he WiMAX Frequency Screen 5 Click Apply . The WiMAX Modem stores your settings. When the WiMAX Modem searches for av ailable freq uencies[...]

Chapter 8 The WAN Configuration Screens User’s Guide 95 The following table describes t he labels in this screen. T able 23 ADV ANCED > W AN Configuration > Advanced LABEL DESCRIPTION DNS Serv ers First, Second and Third DNS Se rver Select Obtained from ISP if y our ISP dynamically assigns DNS server information (and the WiMAX Modem's [...]

Chapter 8 The WAN Configuration Screens User’s Guide 96[...]

User’s Guide 97 C HAPTER 9 The VPN Transport Screens 9.1 Overview This chapter describes the ADVANCED > VPN Transport screens, where you can configure the WiMAX Modem to all ow traffi c from multiple users to pass t hrough the WiMAX network to the service provider’ s router . Each use r has his own personal connection to the service provid e[...]

Chapter 9 The VPN T ransport Screens User’s Guide 98 •T h e Ethernet Pseudowire screen ( Section 9.4 on page 104 ) lets you conf igure the links over the WiMAX network betw een the WiMAX Modem and the service provider’ s router . •T h e Statistics screen ( Section 9.5 on page 107 ) lets you view performanc e informat ion about the VP N tran[...]

Chapter 9 The VPN Transp ort Screens User’s Guide 99 9.1.3 Before Y ou Begin Before you start configuring your WiMAX Mo dem to use VPN transport, e nsure that you hav e the following from the service provider: • The IP address or domain name of the service provider’s edge router . • Virtual ci rcuit (VC) l abels for each Et hernet Pseudowir[...]

Chapter 9 The VPN T ransport Screens User’s Guide 100 9.3 Customer Interface Customer interf ac es co nnect data com i ng from you r com puters to Ethern et pseudowires, according to the data’ s VLAN (Virtual Local Area Network) information. One cust omer interface is for tr affic that has no tag; this is t he default interface (rule 0) which c[...]

Chapter 9 The VPN Transp ort Screens User’s Guide 101 9.3.2 Generic Routing Encap sulation In order to transport the VPLS tr affic ov er the WiMAX network, the WiMAX Modem uses the Generic Routing Encapsulation (GRE) protocol. Lik e MPLS, GRE is a tunneling protocol that has specif ie d endpoints. T he GR E tunnel is bi-directional, and transport[...]

Chapter 9 The VPN T ransport Screens User’s Guide 102 9.3.3 Customer Interface Options Click ADVANCED > VPN T ransport > Custo mer Interface to configure the VPNs used by the WiMAX Modem. Figure 38 ADV ANCED > VPN Transport > Customer Interface The following table describes t he icons in this screen. The following table describes t he[...]

Chapter 9 The VPN Transp ort Screens User’s Guide 103 9.3.4 Customer Interface Setup Click the Edit icon in the ADVANCED > VPN Transport > Customer Interface screen to open the Customer Interface Setup . Customer interfaces map traffic onto spec ific Ethernet pseudowires for transport over the WiMAX network. There is also a default customer[...]

Chapter 9 The VPN T ransport Screens User’s Guide 104 The following table descri bes the labels in this screen. 9.4 Ethernet Pseudowire Because VPLS mimics a simple wired Et hernet connection to your service provider’ s router , the connection between the WiMAX Modem and the peer device is known as an “Ethernet pseudowire” or “PW” . The[...]

Chapter 9 The VPN Transp ort Screens User’s Guide 105 device must be the same as t he egress la bel on the peer device, as shown in the following figure. A is your WiMAX Modem and B is your service provider’ s router . Figure 40 Ethernet Pseudowire Settings Example Click ADVANCED > VPN T ransport > Ethernet Pseudowire to conf igure the Wi[...]

Chapter 9 The VPN T ransport Screens User’s Guide 106 9.4.1 Ethernet Pseudowire Setup Click a pseudowire entry’ s Edit icon in the AD VANCED > VPN Transport > Ethernet Pseudowire screen to set up or modi fy an Ethernet pseudowire’ s configu ration. Figure 42 ADV ANCED > VPN T ransport > Ethernet Pseudowire Setup The following tabl[...]

Chapter 9 The VPN Transp ort Screens User’s Guide 107 9.5 S t atistics Click ADVANCED > VPN T ransport > Statistics to view details and performance information of each active customer interface and its associated Ethernet pseudowire. Figure 43 ADV ANCED > VPN Transport > S tatistics The following table describes t he labels in this sc[...]

Chapter 9 The VPN T ransport Screens User’s Guide 108[...]

User’s Guide 109 C HAPTER 10 The NAT Configuration Screens 10.1 Overview Use these screens to configure port forw arding and trig ger ports for the WiMAX Modem. Y ou can also enable and disable SIP , FTP , and H.323 ALG. Network Address T ranslation (NA T) maps a host’s IP address wi thin one network to a different IP address in another network[...]

Chapter 10 The NAT Config uration Screens User’s Guide 11 0 The following table describes t he labels in this screen. 10.3 Port Forwarding A NA T server set is a list of inside (beh ind NA T on the LAN) servers, for example, web or FTP , that you can make accessible to the outside world ev en though NA T makes your whole inside network appear as [...]

Chapter 10 The NAT Config uration Scre ens User’s Guide 111 Fo r example, let's say you want to assign ports 21-25 t o one FTP , T elnet and SMTP server (A in the example), port 80 to another (B in the example) and assign a default server IP address of 192.1 68.1. 35 to a third ( C in the example). Y ou assign the LAN IP addresses and the IS[...]

Chapter 10 The NAT Config uration Screens User’s Guide 11 2 The following table describes t he icons in this screen. The following table describes t he labels in this screen. T able 33 Advanced> NA T Configuration > Port Forwarding ICON DESCRIPTION Edit Click to edit this item. Delete Click to delete this item. T able 34 ADVANCED > NAT C[...]

Chapter 10 The NAT Config uration Scre ens User’s Guide 11 3 10.3.2 Port Forwarding Rule Setup Click a port forwarding rule’ s Edit icon in the ADVANCED > NAT Configuration > Port Forwarding screen to activ ate, deactiv ate, or edit it. Figure 47 ADV ANCED > NA T Configuration > Port Forwarding > Rule Setup The following table de[...]

Chapter 10 The NAT Config uration Screens User’s Guide 11 4 10.4 T rigger Port Some services use a dedicated r ange of ports on the client side and a dedicated rang e of ports on the server sid e. Wi th regul ar port forwarding you set a forwarding port in NA T to forward a serv ice (coming in from the server on the WAN) to the IP address of a co[...]

Chapter 10 The NAT Config uration Scre ens User’s Guide 11 5 10.4.1 T rigger Port Forwarding Example The following is an example of trigger port forw arding. In this exampl e, J is Jane’ s computer and S is the R eal Audio server . Figure 49 T rigger Port Forwarding Example Start P ort End Port Enter the incoming port number or r ange of port n[...]

Chapter 10 The NAT Config uration Screens User’s Guide 11 6 1 Jane requests a file from the R eal Audio server ( port 7070). 2 P ort 7070 is a “trigger” port and causes t he WiMAX Modem to record Jane’ s computer IP address. The WiMAX Modem as sociates Jane's computer IP a ddress with the "incoming" port range of 6970-7170. 3[...]

Chapter 10 The NAT Config uration Scre ens User’s Guide 11 7 Click ADVANCED > NAT Configuration > ALG to enable and disable SIP (V oIP), FTP (file trans fer), and H.323 (audio- visual) ALG in t he WiMAX Modem. Figure 50 ADV ANCED > NA T Configuration > ALG The following table describes t he labels in this screen. T able 37 ADVANCED &g[...]

Chapter 10 The NAT Config uration Screens User’s Guide 11 8[...]

User’s Guide 11 9 C HAPTER 11 The System Configuration Screens 1 1.1 Overview Click ADVANCED > System Configuration to set up gener al system settings, change the system mode, change the password, configure the DDNS server settings, and set the current date and time. 1 1.1.1 What Y ou Can Do in This Chapter •T h e General screen ( Section 11[...]

Chapter 11 Th e Syst em Con fig ur at ion Scre en s User’s Guide 120 • In Windows XP: Click Start > My Computer > View system information and then clic k the Computer Name tab. Note the entry in t he Full computer name field and enter it as the WiMAX Modem System Name . Domain Name The Domain Name entry is what is propag ated to the D HCP[...]

Chapter 11 The Syste m Configurat ion Screens User’s Guide 121 1 1.2 General Click ADVANCED > System Configuration > General to change the WiMAX Modem’s mode, set up it s syste m name , domain name, idle timeout, and administr ator password. Figure 51 ADV ANCED > System Configuration > General The following table describes t he labe[...]

Chapter 11 Th e Syst em Con fig ur at ion Scre en s User’s Guide 122 1 1.3 Dynamic DNS Dynamic DNS allows you to update your current dynamic IP a ddress with one or many dynamic DNS services so that anyo ne can contact you (in NetMeeting, CU- SeeMe, etc.). Y ou can also access your FTP server or W eb site on your own computer using a domain name [...]

Chapter 11 The Syste m Configurat ion Screens User’s Guide 123 Click ADVANCED > System Configuration > Dynamic DNS to set up the WiMAX Modem as a dy namic DNS client. Figure 52 ADV ANCED > System Configuration > Dynamic DNS The following table describes t he labels in this screen. T able 39 ADVANCED > System Configuration > Dyna[...]

Chapter 11 Th e Syst em Con fig ur at ion Scre en s User’s Guide 124 1 1.4 Firmware Click ADVANCED > System Configuration > Firmware to upload new firmware to the WiMAX Modem. Firmware files usually use the system model name with a "*.bin" extension, such as "WiMAX Modem.bin". The upload process uses HT TP (Hypertext T r[...]

Chapter 11 The Syste m Configurat ion Screens User’s Guide 125 The following table describes t he labels in this screen. 1 1.4.1 The Firmware Upload Process When the WiMAX Modem uploads new firm ware, the process usually takes about two minutes. The device also automati call y restarts in th is time. Th is causes a temporary network disconnect. N[...]

Chapter 11 Th e Syst em Con fig ur at ion Scre en s User’s Guide 126 1 1.5 Configuration Click ADVANCED > System Config uration > Configuration to back up or restore the configuration of the WiMAX Mo dem. Y ou can also use this screen to reset the WiMAX Modem to the factory def ault settings. Figure 54 ADV ANCED > System Configuration &g[...]

Chapter 11 The Syste m Configurat ion Screens User’s Guide 127 1 1.5.1 The Restore Configuration Process When the WiMAX Modem restores a config ur ation fil e, the device automatically restarts. This causes a tempor ary network disconnect. Note: Do not turn of f the device while configuratio n file upload is in progress. If the WiMAX Modem’ s I[...]

Chapter 11 Th e Syst em Con fig ur at ion Scre en s User’s Guide 128 1 1.6.1 The Restart Process When you click Resta rt , the the p roc es s u sually takes about two minutes. Onc e the restart is complete you can l og in again.[...]

129 P ART IV Vo i c e S c r e e n s The Service Configurat ion Screens (131) The Phone Screens (149) The Phone Book Screens (159)[...]

130[...]

User’s Guide 131 C HAPTER 12 The Service Configuration Screens 12.1 Overview The VOICE > Service Configuration screens allow you to set up your voi ce accounts and configure your QoS settings. V oIP (V oice ov er IP) is the sending of voic e signals over the Internet Protocol. This allows y ou to make phone calls and send fa x es over the Inte[...]

Chapter 12 Th e Ser vice Con fig ur at ion Scre en s User’s Guide 132 multimedia sessions ov er the Internet. SI P signaling is s eparate from the media for which it handles sessions. The media th at is exchanged during the session can use a different path from that of the signaling. SIP handles telephone calls and can interface with tr aditional[...]

Chapter 12 The Ser vice Configurat ion Screens User’s Guide 133 12.1.3 Before you Begin • Ensure that you have all of y our voice account information on hand. If not, contact your voi ce account service provider to find out which settings in this chapter you should configure in order to use your telep h one wi t h th e WiMAX Modem. • Connect [...]

Chapter 12 Th e Ser vice Con fig ur at ion Scre en s User’s Guide 134 The following table describes t he labels in this screen. T able 43 VOICE > Service Configuration > SIP Set ting LABEL DESCRIPTION SIP Account Select the SIP account you want to see in this screen. If you change this field, the screen automatically refre shes. SIP Setting[...]

Chapter 12 The Ser vice Configurat ion Screens User’s Guide 135 12.2.1 Advanced SIP Settings This section describes the features of the Adv anced SIP settings screen. 12.2.1.1 STUN STUN (Simple T raver sal of User Dat a gram Protocol (UDP) through Network Address T ranslators) allows the WiMAX Mo dem to find the presence and types of NA T routers[...]

Chapter 12 Th e Ser vice Con fig ur at ion Scre en s User’s Guide 136 • G.711 is a Pulse Code Modulati on (PCM) wav eform codec. PCM measures analog signal amplitudes at regular time interv als (sampling) and converts them into digital bits (quantizati o n) . Quantiza tion “reads” the analog signal and then “writes” it to the nearest di[...]

Chapter 12 The Ser vice Configurat ion Screens User’s Guide 137 12.2.1.5 Advanced SIP Settings Options Click Advanc ed in VOICE > Service Config uration > SIP Settings to set up and maintain advanced sett ings for each SIP account. Figure 58 VOICE > Service Conf igurati on > SIP Se ttings > Advanced The following table describes t [...]

Chapter 12 Th e Ser vice Con fig ur at ion Scre en s User’s Guide 138 Expiration Duration Enter the number of seconds your SIP accou nt is registered with the SIP register serv er before it is delete d. The WiMAX Modem automatically tries to re-register your SIP account when one-half of this time has passed. (The SIP register server might have a [...]

Chapter 12 The Ser vice Configurat ion Screens User’s Guide 139 STUN Active Select this if all of the following conditions are satisfied. • There is a NA T router betwee n the WiMA X Modem and the SIP server . • The NA T router is not a SIP ALG. • Y our V oIP service provider gave you an IP address or domain name for a STUN server . • Oth[...]

Chapter 12 Th e Ser vice Con fig ur at ion Scre en s User’s Guide 140 12.2.1.6 Custom T ones (IVR) IVR (Interac tive V oice Response) is a feature that allows you to use your telephone to interact with th e WiMAX Modem. The WiMAX Modem allows you to record custom tones for the Caller Ringing Tone and On Hold Tone functions. The same recordings ap[...]

Chapter 12 The Ser vice Configurat ion Screens User’s Guide 141 Use the following steps if you would like to create new tones or change your tones: 1 Pick up the phone and press **** on your phone’ s keypad and w ait for the message that says you are in the configurati on menu. 2 Press a number from 1101~1108 on y our phone followed by the # ke[...]

Chapter 12 Th e Ser vice Con fig ur at ion Scre en s User’s Guide 142 12.3 QoS Network traffi c can be classified by setting the T oS (T ype Of Service) values at the data source (for example, at the WiMAX Modem) so a s erver can decide the best method of delivery , that is the least cost , fastest route and so on. Virtual Local Area Network (VLA[...]

Chapter 12 The Ser vice Configurat ion Screens User’s Guide 143 12.4 T echnical Reference The following section contains additional technical information about the WiMAX Modem features describ ed in this chapter . 12.4.1 SIP Call Progression The following figure displa ys the basic st eps in the setup and t ear down of a SIP call. A calls B. 1 A [...]

Chapter 12 Th e Ser vice Con fig ur at ion Scre en s User’s Guide 144 6 After talking, A hangs up and sends a BYE request. 7 B replies with an OK response confirming receipt of the BYE request and the call is terminated. 12.4.2 SIP Client Server SIP is a client -server protocol. A SIP client is an application progr am or device that sends SIP req[...]

Chapter 12 The Ser vice Configurat ion Screens User’s Guide 145 2 The SIP proxy server forw ards the call invitation to C. Figure 61 SIP Proxy Server 12.4.5 SIP Redirect Server A SIP redirect serv er accepts SIP requests , tr anslates the destination address to an IP address and sends the translated IP address back to the device that sent the req[...]

Chapter 12 Th e Ser vice Con fig ur at ion Scre en s User’s Guide 146 3 Client device A then sends the call invitation to client device C. Figure 62 SIP Redirect Se rver 12.4.6 NA T and SIP The WiMAX Modem must register i ts public IP address wi th a SIP register server . If there is a NA T router between the Wi MAX Modem and the SIP register ser[...]

Chapter 12 The Ser vice Configurat ion Screens User’s Guide 147 12.4.8 DSCP and Per-Hop Behavior DiffServ defines a new DS ( Differentiated Services) field to replace the T ype of Service (TOS) field in th e IP header . The DS field contains a 2-bit unused field and a 6-bit DSCP field whic h can define up to 64 servi ce levels. The followi ng fig[...]

Chapter 12 Th e Ser vice Con fig ur at ion Scre en s User’s Guide 148[...]

User’s Guide 149 C HAPTER 13 The Phone Screens 13.1 Overview Use the VOICE > Phone screens to configure the volume, echo cancellation, VAD settings and custom tones for the phone port on the WiMAX Modem. Y ou can also select which SIP account to use f or making outgoing calls. 13.1.1 What Y ou Can Do in This Chapter •T h e Analog Phone scree[...]

Chapter 13 The Phon e Screens User’s Guide 150 Supplement ary Phone Services Overview Supplementary services such as call ho ld, call waiting, call tr ansfer , etc. are generall y av ailable from your V oIP service provider . The WiMAX Modem supports the following s e rv ic es : • Call Hold • Call W aiting • Making a Second Call • Call T [...]

Chapter 13 The Phone Screens User’s Guide 151 The following table describes t he labels in this screen. 13.2.1 Advanced Analog Phone Setup Click the Advanced button in VOICE > Phone > Analog Phone to edit adva nc ed settings for each phone port. Figure 65 VOICE > Phone > Analog Phone > Advanced T able 48 VOICE > Phone > An al[...]

Chapter 13 The Phon e Screens User’s Guide 152 The following table describes t he labels in this screen. 13.3 Common Click VOICE > Phone > Common to activ ate and deac tivate immedi ate dialing. Figure 66 VOICE > Phone > Common T able 49 VOICE > Phone > An alog Phone > Advanced LABEL DESCRIPTION Vo i c e Vo l u m e C o n t r [...]

Chapter 13 The Phone Screens User’s Guide 153 The following table describes t he labels in this screen. 13.4 Region Click VOICE > Phone > Region to maintain settings that often depend on the region of the world in which t he WiMAX Modem is located. Figure 67 VOICE > Phone > Region The following table describes t he labels in this scre[...]

Chapter 13 The Phon e Screens User’s Guide 154 13.5 T echnical Reference The following section contains additional technical information about the WiMAX Modem features describ ed in this chapter . 13.5.1 The Flash Key Flashing means to press the hook for a short period of time (a few hundred milliseconds) bef ore releasing it. On newe r telephone[...]

Chapter 13 The Phone Screens User’s Guide 155 If you have another call, press the flash ke y and then “2” to switch back and forth between caller A and B by putting either one on hold. Press the flash key and then “0” to disconnect the call presently on hold and keep the current call on line. Press the flash key and then “1” to discon[...]

Chapter 13 The Phon e Screens User’s Guide 156 4 Hang up the phone to drop the connection. 5 If you want to separate the activ ated th ree- w ay conference into two individual connections (one is on-line, the other is on hold), press the flash key and press “2” . 13.5.3 USA T ype Supplement ary Services This section describes how to use su pp[...]

Chapter 13 The Phone Screens User’s Guide 157 3 After you hear the ring s ignal or the second party answers it, hang up t he phone. USA Three-Way Conference allows you to mak e three-w ay conference calls. T o do so: 1 When you are making a call, press the flash key t o put the call on hold and get a dial tone. 2 Dial a phone number to make a sec[...]

Chapter 13 The Phon e Screens User’s Guide 158[...]

User’s Guide 159 C HAPTER 14 The Phone Book Screens 14.1 Overview The VOICE > Phone Book screens allow you to configure the WiMAX Modem’s phone book for making V oIP calls. 14.1.1 What Y ou Can Do in This Chapter •T h e Incoming Call Policy screen ( Section 14.2 on page 160 ) lets you maintain rules for handling incoming calls. Y o u can b[...]

Chapter 14 Th e Pho ne B ook Sc re ens User’s Guide 160 14.2 Incoming Call Policy Click VOICE > Phone Book > Incoming Call Policy to maintain rules for handling incoming calls. Y ou can block, redirect, or accept them. Figure 68 VOICE > Phone Bo ok > Incoming Call Policy The following table describes t he labels in this screen. T able[...]

Chapter 14 The Phone Book Screens User’s Guide 161 Note: The WiMAX Modem checks the Advanced rules f irst before checking the Forward to Number rules. All rules are checked in order from top to bot tom. No Answer For w a r d t o Number Select this if you w ant the WiMAX Modem to forward incoming calls to the specifie d phone number if the call is[...]

Chapter 14 Th e Pho ne B ook Sc re ens User’s Guide 162 14.3 S peed Dial Click VOICE > Phone Book > Speed Dial to add, edit, or remove speed-dial entries. Y ou m u st create spee d-dial en tri e s if you want to make peer-to-peer calls or call SIP numbers that use letters. Y ou can also create speed-dial entries for frequently-used SIP phon[...]

Chapter 14 The Phone Book Screens User’s Guide 163 The following table describes t he labels in this screen. T able 56 VOICE > Phone Boo k > Speed Dial LABEL DESCRIPTION Speed Dial Select the speed-dial number you w ant to use for this phone number . Number Enter the SIP number you w ant the WiMAX Modem to call when you dial the speed-dial [...]

Chapter 14 Th e Pho ne B ook Sc re ens User’s Guide 164[...]

165 P ART V T ools & S t atus Screens The Certificates Screens (167) The Firewall Screens (189) Content Filter (199) The Re mote Management Screens (203) QoS (215) The Logs Screens (219) The Status Screen (235)[...]

166[...]

User’s Guide 167 C HAPTER 15 The Certificates Screens 15.1 Overview Use the TOOLS > Certificates screens to manage public key certificates on the WiMAX Modem. The WiMAX Modem can use public k ey certificates (also someti mes called “digital IDs”) to authenticate users. Certificates are based on pub lic-priv ate key pairs. A certificate c o[...]

Chapter 15 Th e Cer tific at es Screens User’s Guide 168 WiMAX Modem to gener ate certification requests t hat contain identifying information and pub lic keys and then send t he certification requests to a certification authority . 15.2 My Certificates Click TOOLS > Certificates > My Certificates to access thi s screen. Use this screen to [...]

Chapter 15 T he Certifica tes Screens User’s Guide 169 Name This field displays the name used to identify this certificate. It is recommended that you give each certificate a unique name. T ype This field displays what kind of certificate this is. REQ represents a certification request and is not yet a valid certificate. Send a certification requ[...]

Chapter 15 Th e Cer tific at es Screens User’s Guide 170 15.2.1 My Certificates Create Click TOOLS > Certificates > My Certificates and then the Create icon to open the My Certificates Create screen. Use this screen to have the WiMAX Modem create a self -signed certificate, enroll a ce rtificate with a certi fication authority or generate a[...]

Chapter 15 T he Certifica tes Screens User’s Guide 171 The following table describes t he labels in this screen. T able 59 TOOLS > Ce rtificates > My Certificates > Create LABEL DESCRIPTION Certificate Name T ype a name to identify this certificate. Y ou can use up to 31 alphanumeric and ;‘~!@#$%^&()_+[]{}’ ,.=- characters. Subje[...]

Chapter 15 Th e Cer tific at es Screens User’s Guide 172 Create a certification request and enroll for a certificate immediately online Select Create a certification request and enroll for a certificate immediately online to have the WiMAX Modem generate a requ est for a certificate and apply to a certification authority for a certificate. Y ou m[...]

Chapter 15 T he Certifica tes Screens User’s Guide 173 If you confi gu red the My Certificate Create screen to hav e the WiMAX Modem enroll a certif ic a t e a nd th e certific a t e enrollment is not successful, you see a screen with a Return button that takes you back to the My Certificate Create screen. Click Return and check yo ur information[...]

Chapter 15 Th e Cer tific at es Screens User’s Guide 174 15.2.2 My Certificate Edit Click TOOLS > Certificates > My Certificates then the Edit icon to access this screen. Use this screen to view in-depth certificat e information and change the certificate’ s name. Figure 72 T OOLS > Certificates > My Certificates > Edit The follo[...]

Chapter 15 T he Certifica tes Screens User’s Guide 175 Certification P ath This field displays for a certificate, not a certification request. Click the Refresh button to have this read-only text bo x display the hierarchy o f certification authorities that validate the certificate (and the certificate itself ). If the issuing certification autho[...]

Chapter 15 Th e Cer tific at es Screens User’s Guide 176 K ey Usage This field di splays for what functions the certificate’s key can be used. For example, “DigitalSi gnature” means that the key can be used to sign certificates and “K eyEncipherment” means that the key can be used to encrypt text. Basic Constraint This field displays ge[...]

Chapter 15 T he Certifica tes Screens User’s Guide 177 15.2.3 My Certificate Import Click TOOLS > Certificates > My Certificates > Import to ac cess this screen. Use this screen to import a certificate that matches a corresponding certif ication request that was generated by the WiMAX Modem. Y ou must remove any spaces from the ce rtific[...]

Chapter 15 Th e Cer tific at es Screens User’s Guide 178 15.3 T rusted CAs Click TOOLS > Certificates > Trusted CAs access this screen. Use this screen to display a summary list of certificates of the certification authorities that y ou have set the WiMAX Modem to accept as t rusted. The WiMAX Modem accepts any valid certificate signed by a[...]

Chapter 15 T he Certifica tes Screens User’s Guide 179 Issuer This field displays identifying in formation about the certificate’ s issuing certification authority , such as a common name, organizational unit or department, organization or company and country . With self-signed certificates, this is the same information as in the Subject field.[...]

Chapter 15 Th e Cer tific at es Screens User’s Guide 180 15.3.1 T rusted CA Edit Click TOOLS > Certificates > Trusted CAs and then click the Edit icon to open the Trusted CAs screen. Use this screen to view in-depth certificate information and change the certificate’ s name. Figure 75 T OOLS > Certificates > T rusted CAs > Edit T[...]

Chapter 15 T he Certifica tes Screens User’s Guide 181 Certification P ath This field displays for a certificate, not a certification request. Click the Refresh button to have this read-only text bo x display the hierarchy o f certification authorities that validate the certificate (and the certificate itself ). If the issuing certification autho[...]

Chapter 15 Th e Cer tific at es Screens User’s Guide 182 K ey Usage This field di splays for what functions the certificate’s key can be used. For example, “DigitalSi gnature” means that the key can be used to sign certificates and “K eyEncipherment” means that the key can be used to encrypt text. Basic Constraint This field displays ge[...]

Chapter 15 T he Certifica tes Screens User’s Guide 183 15.3.2 T rusted CA Import Click TOOLS > Certificates > Trusted CAs and then click Import to open the Trusted CA Import screen. F ollow the instructio ns in this screen to save a trusted certification authority’ s certificat e from a computer to the WiMAX Modem. The WiMAX Modem t rusts[...]

Chapter 15 Th e Cer tific at es Screens User’s Guide 184 15.4.1 Certificate Authorities When using public-k ey cryptology for auth entic ation, each host has two keys. One key is public and can be made openl y available. The other key is private and must be kept secure. These keys work like a handwritten sign ature (in fact, certificates are ofte[...]

Chapter 15 T he Certifica tes Screens User’s Guide 185 Certification authorities maintain di rect ory servers wit h databases of v alid and revoke d cert ific ates . A di r e cto r y o f cer t i fica t es th at have b e en re voked b efor e the scheduled expir ation is called a CRL (C ertificate R evocation List) . The WiMAX Modem can check a pee[...]

Chapter 15 Th e Cer tific at es Screens User’s Guide 186 15.4.2 V erifying a Certificate Before you import a certificate into the WiMAX Modem, y ou should v erify that y ou have the correct ce rtificate. Th is is espec ial l y t rue of trusted c e rt if ic a t es s in ce the WiMAX Modem also trusts an y v alid certificate signed by an y of the im[...]

Chapter 15 T he Certifica tes Screens User’s Guide 187 3 Double-click the certificate’ s icon to open the Certificate window . Click the Details tab and scroll down to the Thumbprint Algorithm and Thumbprint fields. Figure 78 Certificate Det ails 4 Use a secure method to verify t hat the certificate owner has the same information in the Thumbp [...]

Chapter 15 Th e Cer tific at es Screens User’s Guide 188[...]

User’s Guide 189 C HAPTER 16 The Firewall Screens 16.1 Overview Use the TOOLS > Firewall screens to manage WiMAX Modem’ s firew all security measures. Originally , the term firewall referred to a c onstruction technique d esigned to prevent the spread of fire from one r oom to another . The networking term "firewall" is a system or[...]

Chapter 16 Th e Fir ew all Scre e ns User’s Guide 190 the Internet. The WiMAX Modem can be us ed to prevent thef t, destruction and modification of data, as well as log events, which may be imp ortant to the security of your network. The WiMAX Modem is installed between the LAN and a WiMAX base station connecting to the Interne t. Th is all o ws [...]

Chapter 16 The Firewall Scree ns User’s Guide 191 LAN-to-LAN/WiMAX Modem means the LAN to the WiMAX Modem LAN interface. This is alwa ys allowed, as this is how y ou manage the WiMAX Modem from your local com p uter . WAN-to-LAN rules are Internet to your local ne twork firew all rules. The default is to block all traffic from th e Internet to yo[...]

Chapter 16 Th e Fir ew all Scre e ns User’s Guide 192 16.2.3 General Options Click TOOLS > Firewall > General to configure the basic settings for your firewall. Figure 81 T OOLS > Firewall > General The following table describes t he labels in this screen. T able 66 TOOLS > Firewall > Genera l LABEL DESCRIPTION Enable Firewall S[...]

Chapter 16 The Firewall Scree ns User’s Guide 193 16.3 Services Click TOOLS > Firewall > Services to enable service bl ocking, set up the date and time service blocking is effective, and to maintain the list of servi ces you want to block. Figure 82 T OOLS > Firewall > Service Setting The following table describes t he labels in this [...]

Chapter 16 Th e Fir ew all Scre e ns User’s Guide 194 16.4 T echnical Reference The following section contains additional technical information about the WiMAX Modem features describ ed in this chapter . 16.4.1 S t ateful In spection Firewall. Stateful insp ection firewalls restrict access by s creening data packets against defined access rule s.[...]

Chapter 16 The Firewall Scree ns User’s Guide 195 16.4.2 Guidelines For Enhancing Security With Y our Firewall 1 Change the default password via web configurator . 2 Think about access control b efore you connect to the network in an y w ay . 3 Limit who can acce ss your router . 4 Don't enable any local service (such as te lnet or FTP) that[...]

Chapter 16 Th e Fir ew all Scre e ns User’s Guide 196 As a result, the WiMAX Modem resets t he connection, as the connecti on has not been acknowledged. Figure 83 “T riangle Route” Problem 16.4.3.1 Solving the “T riangle Route” Problem If you have t he WiMAX Modem allow triangle rout e sess ions, tr affic from the W AN can go directly to [...]

Chapter 16 The Firewall Scree ns User’s Guide 197 4 The WiMAX Mode m then sends it t o th e computer on the LAN in Subnet 1. Figure 84 IP Alias[...]

Chapter 16 Th e Fir ew all Scre e ns User’s Guide 198[...]

User’s Guide 199 C HAPTER 17 Content Filter 17.1 Overview Use the TOOLS > Content Filter screens to create and enforce policies that restrict access to the Internet based on content Internet content filtering allows you to cr eate and enforce Internet access policies tailored to their nee ds. Cont ent filtering is the ability to block certain [...]

Chapter 17 Content Filter User’s Guide 200 17.2 Filter Click TOOLS > Content Filter > Filter to set up a trusted IP address, which web features are restricted, and which keywords are block ed when content filtering is effective. Figure 85 T OOLS > Content Filter > Filter[...]

Chapter 17 Content Filter User’s Guide 201 The following table describes t he labels in this screen. T able 68 TOOLS > Co ntent Filter > Filter LABEL DESCRIPTION T rusted IP Setup Tr u s t e d Computer IP Address Y ou can allow a specific computer to access all Internet resources without the restrictions you set in these screens. Enter the [...]

Chapter 17 Content Filter User’s Guide 202 17.3 Schedule Click TOOLS > Content Filter > Schedule to schedule content filtering. Figure 86 T OOLS > Content Filter > Schedule The following table describes t he labels in this screen. T able 69 TOOLS > Co ntent Filter > Schedule LABEL DESCRIPTION Day to Block Select which da ys of t[...]

User’s Guide 203 C HAPTER 18 The Remote Management Screens 18.1 Overview Use the TOOLS > Remote Manage ment screens to control which computers can use which services to ac cess th e WiMAX Modem on each interface. Re mote management allows you to determi ne which services/protocols can acces s which WiMAX Mode m int e rf ace (i f any ) fr om wh[...]

Chapter 18 Th e Rem o te Man a ge m en t Scre e ns User’s Guide 204 •T h e SNMP screen ( Section 18.5 on page 207 ) lets you control SNMP access to your WiMAX Modem. •T h e DNS screen ( Section 18.6 on page 210 ) lets you control DNS access to your WiMAX Modem. •T h e Security screen ( Section 18.7 on page 211 ) lets you control how y our W[...]

Chapter 18 The Remote Mana gement Screens User’s Guide 205 SNMP Simple Network Manageme nt Protocol (SNM P) is a protocol used for exchanging management information between ne twork devices. SNMP is a member of the TCP/IP protocol suite. Y our WiMAX Mo dem supports SNMP agent functionalit y , which allows a manager station to manage and monitor t[...]

Chapter 18 Th e Rem o te Man a ge m en t Scre e ns User’s Guide 206 18.3 T elnet Click TOOLS > Remote Management > Telnet to control T elnet access to your WiMAX Modem. Figure 88 T OOLS > Remote Management > T elnet The following table describes t he labels in this screen. 18.4 FTP Click TOOLS > Remote Management > FTP to contro[...]

Chapter 18 The Remote Mana gement Screens User’s Guide 207 The following table describes t he labels in this screen. 18.5 SNMP An SNMP managed network consists of two main types of component: agents and a manager . Figure 90 SNMP Managemen t Model An agent is a management software module that resides in a ma naged de vice (the WiMAX Modem). An ag[...]

Chapter 18 Th e Rem o te Man a ge m en t Scre e ns User’s Guide 208 The managed devices contain object v ariables/managed objects that d efine each piece of info rmat ion to be collected abou t a device. Examples of variabl es include such as number of pack ets received, node port status etc. A Management Information Base (MIB) is a collection of[...]

Chapter 18 The Remote Mana gement Screens User’s Guide 209 18.5.2 SNMP Options Click TOO LS > Remote Man age ment > SNMP to access this screen. Use SNMP options to control SNMP a ccess to your WiMAX Modem. Figure 91 T OOLS > Remote Management > SNMP The following table describes t he labels in this screen. T able 75 TOOLS > Re mote[...]

Chapter 18 Th e Rem o te Man a ge m en t Scre e ns User’s Guide 210 18.6 DNS Click TOOLS > Remote Management > DNS to access th i s screen. Use this screen to con t rol D NS access t o yo ur Wi M AX Modem . Figure 92 T OOLS > Remote Management > DNS The following table describes t he labels in this screen. Secured Client IP A secured [...]

Chapter 18 The Remote Mana gement Screens User’s Guide 21 1 18.7 Security Click TOOLS > Remote Management > Security to access this screen. Use this screen to control how your WiMAX Modem responds to other types of requests. Figure 93 T OOLS > Remote Management > Security The following table describes t he labels in this screen. T abl[...]

Chapter 18 Th e Rem o te Man a ge m en t Scre e ns User’s Guide 212 18.8 TR0-69 TR -069 is an abbreviati on of “T echnical Reference 069” , a protocol designed to facilitate the remote management of Cu stomer Premise Equipement (CPE), such as the WiMAX Modem. It can be manage d over a W AN by means of an Auto Configuration Serv er (ACS). TR -[...]

Chapter 18 The Remote Mana gement Screens User’s Guide 213 Click TOOLS > Remote Management > TR069 to access thi s screen. Use this screen to open WiMAX Modem’ s auto -configuration and dynamic service configuration o ptions. Figure 95 T OOLS > Remote Management > TR069 The following table describes t he labels in this screen. T abl[...]

Chapter 18 Th e Rem o te Man a ge m en t Scre e ns User’s Guide 214 P eriodic Inform Enable Select this to allow the WiMAX Modem to periodically connect to the ACS and check for configuration updates. If you do not enable this featu re then the WiMAX Modem can only be updated automatically when the ACS initiates contact with it and if y ou select[...]

User’s Guide 215 C HAPTER 19 QoS 19.1 Overview Quality of Service (QoS) refers to both a network’ s ability to deliver data with minimum delay , and the networking me thods used to control the use of bandwidth. Without QoS , all tr affic data is equally likely to be dropped when the network is congested. This can cause a reduction in network pe[...]

Chapter 19 Q oS User’s Guide 216 19.3 Class Setup Use this screen to add, edit or delete QoS classifiers. A classifier groups traffic into data flows according to specific criteria such as the source address, destination address, source port number , destination port number or incoming interface. F or example, you can configure a classifier to se[...]

Chapter 19 QoS User’s Guide 217 19.3.1 Class Configuration Click the Create New Class button or the edit icon i n the Class Setup screen to configure a classifier . Figure 98 QoS > Class Se tup > Class Configuration The following table describes t he labels in this screen. T able 81 QoS Class Setup LABEL DESCRIPTION Class Configur ation Act[...]

Chapter 19 Q oS User’s Guide 218[...]

User’s Guide 219 C HAPTER 20 The Logs Screens 20.1 Overview Use the TOOLS > Logs screens to look at log entries and alerts and to configure the WiMAX Modem’ s lo g and alert settings. For a list of log messages, see Section 20.4 on page 225 . 20.1.1 What Y ou Can Do in This Chapter •T h e View Logs screen ( Section 20.2 on page 221 ) lets [...]

Chapter 20 T h e Lo gs Scree n s User’s Guide 220 can reconstruct and analyze the tr affic fl owing through the device after collect ing the traffic logs. The following table shows RFC -2408 ISAKMP payload t ypes that the log displays. Please refer to the RFC for detailed information on eac h type. T able 82 Syslog Logs LOG MESSAGE DESCRIPTION Ev[...]

Chapter 20 Th e Lo gs Scre en s User’s Guide 221 20.2 V iew Logs Click TOOLS > Logs > View Log to access this screen. Use this screen to look at log entries and alerts. Al erts are written in red. Figure 99 T OOLS > Logs > V iew Logs Click a column header to sort log entries in descending (later-to-earlier) order . Click again to sort[...]

Chapter 20 T h e Lo gs Scree n s User’s Guide 222 # The number of the item in this list. Time This field displays the time the log entry w as recorded. Message This field displays the reason for the log entry . See Section 20.4 on page 225 . Source This field displays the source IP address and the port number of the incoming packet. In many cases[...]

Chapter 20 Th e Lo gs Scre en s User’s Guide 223 20.3 Log Settings Click TOOLS > Logs > Log Settings to configure where the WiMAX Modem sends logs and alert s, the sched ule for sen ding logs , and whic h logs a nd alerts are sent or recorded. Figure 100 T OOLS > Logs > Log Settings[...]

Chapter 20 T h e Lo gs Scree n s User’s Guide 224 The following table descri bes the labels in this screen. T able 85 TOOLS > Logs > Log Settings LABEL DESCRIPTION E-mail Log Settings Mail Server Enter the server name or the IP address of the mail server the WiMAX Modem should use to e-mail logs and alerts. Leave this field blank if you do [...]

Chapter 20 Th e Lo gs Scre en s User’s Guide 225 20.4 Log Message Descriptions The following tables provide descriptions of example log messages. Apply Click to save your changes. Cancel Click to return to the previous screen without saving your changes. T able 85 TOOLS > Logs > Log Settings LABEL DESCRIPTION T able 86 System Error Logs LOG[...]

Chapter 20 T h e Lo gs Scree n s User’s Guide 226 Time initialized by Time server The device got the time and date from the time server . Time initialized by NTP server The device got the time and date from the NTP server . Connect to Daytime server fail The device was not able to co nnect to the Daytime server . Connect to Time server fail The d[...]

Chapter 20 Th e Lo gs Scre en s User’s Guide 227 T able 89 TCP Reset Logs LOG MESSAGE DESCRIPTION Under SYN flood attack, sent TCP RST The router sent a TCP reset pack et when a host was under a SYN flood attack (the TCP incomplete count is per destination host.) Exceed TCP MAX incomplete, sent TCP RST The router sent a TCP reset packet when the [...]

Chapter 20 T h e Lo gs Scree n s User’s Guide 228 F or type and code details, see T able 97 on page 2 31 . T able 91 ICMP Logs LOG MESSAGE DESCRIPTION Firewall default policy: ICMP <Packet Direction>, <type:%d>, <code:%d> ICMP access matched the default policy and was blocked or forwarded according to the user's setting. Fi[...]

Chapter 20 Th e Lo gs Scre en s User’s Guide 229 For type and code details, see T able 97 o n page 231 . T able 94 Content Filtering Log s LOG MESSAGE DESCRIPTION %s: Keyword blocking The content of a requested web page matched a us er defined keyw ord . %s: Not in trusted web list The web site is not in a trusted domain, and the router blocks al[...]

Chapter 20 T h e Lo gs Scree n s User’s Guide 230 ip spoofing - WAN ICMP (type:%d, code:%d) The firewall detected an ICMP IP spoofing attack on the WA N p o r t . icmp echo : ICMP (type:%d, code:%d) The firewall detected an ICMP echo attack. syn flood TCP The firewall detected a TCP syn flood attack. ports scan TCP The fire wall detected a TC P p[...]

Chapter 20 Th e Lo gs Scre en s User’s Guide 231 Remote Management: WWW denied Attempted use of WWW service was blocked according to remote management settings. Remote Management: HTTPS denied Attempted use of HT TPS service w as blocked according to remote management settings. Remote Management: SSH denied Attempted use of SSH service w as block[...]

Chapter 20 T h e Lo gs Scree n s User’s Guide 232 0 Timestamp request message 14 Timestamp Reply 0 Timestamp reply message 15 Information R equ est 0 Information request message 16 Information R eply 0 Information reply message T able 98 SIP Logs LOG MESSAGE DESCRIPTION SIP Registration Success by SIP:SIP Phone Number The listed SIP account was s[...]

Chapter 20 Th e Lo gs Scre en s User’s Guide 233 T able 100 FSM Logs: Caller Side LOG MESSAGE DESCRIPTION VoIP Call Start Ph[Phone Port Number] <- Outgoing Call Number Someone used a phone connected to the listed phone port to initiate a V oIP call to the listed destination. VoIP Call Established Ph[Phone Port] -> Outgoing Call Number Someo[...]

Chapter 20 T h e Lo gs Scree n s User’s Guide 234[...]

User’s Guide 235 C HAPTER 21 The Status Screen 21.1 Overview Use this screen to view a complete summary of your WiMAX Modem connection status. 21.2 S t atus Screen Click the STATUS i con in the navigation bar t o go to this screen, where you can view the current status of the device, system resourc es, interfaces (LAN and WAN), and SIP accounts. [...]

Chapter 21 Th e Sta tus Screen User’s Guide 236 The following tables describe the l abels in this screen. T able 103 Status LABEL DESCRIPTION R efresh Interval Select how often you want the WiMAX Modem to update this screen. R efresh Now Click this to update this screen immediately . Device Information System Name This field displays the WiMAX Mo[...]

Chapter 21 The Status Screen User’s Guide 237 WiMAX State This field displays the status of the WiMAX Modem’ s current connection. • INIT : the WiMAX Modem is starting up. • DL_SYN : The WiMAX Modem is unable to connect to a base station. • RANGING : the WiMAX Modem and the base station are transmitting and receiving information about the[...]

Chapter 21 Th e Sta tus Screen User’s Guide 238 Memory Usage This field displays what perc entage of the WiMAX Modem’ s memory is currently used. The higher the memory usage, the more likely the WiMAX Modem is to slow down. Some memory is required just to start the WiMAX Modem and to run the web configur ator . Y ou can reduce the memory usage [...]

Chapter 21 The Status Screen User’s Guide 239 21.2.1 Packet St atistics Click Status > Packet Statistics to open this screen . This read-only screen displays information about t he data transmission through the WiMAX Modem. T o configure these settings, go to the corresponding area in the Advanced screens. Figure 102 Packe t S t atistics R egi[...]

Chapter 21 Th e Sta tus Screen User’s Guide 240 The following table describes t he fields in this screen. T able 104 Packet Statistics LABEL DESCRIPTION P ort This column displays each interface of the WiMAX Modem. Status This field indicates whether or not the WiMAX Modem is using the interface. For the W AN interface, this field displays the po[...]

Chapter 21 The Status Screen User’s Guide 241 21.2.2 WiMAX Site Information Click Status > WiMAX Site Information to open this screen. This read-only screen shows WiMAX freque ncy informatio n for the WiMAX Mode m. These se ttings can be configured in the ADVANCED > WAN Configuration > WiMAX Configuration screen. Figure 103 WiMAX Site In[...]

Chapter 21 Th e Sta tus Screen User’s Guide 242 21.2.3 DHCP T able Click Status > DHCP Table to open this screen. This read-only screen shows the IP addresses, Host Names and MAC addre sses of the devices currently connec ted to the WiMAX Modem. These settings can be config ured in the ADVANCED > LAN Configuration > DHCP Setup screen. Fi[...]

Chapter 21 The Status Screen User’s Guide 243 21.2.4 V oIP St atistics Click Status > DHCP Table to open this screen. This read-only screen shows SIP registr a tion informati on, status of calls and V oIP tr affic statistics. Thes e settings can be configured in the VOICE > Service Configuration > SIP Setting sc reen. Figure 105 V oIP S [...]

Chapter 21 Th e Sta tus Screen User’s Guide 244 Last Outgoing Number This field displays the last number the SIP account called. It displays N/A if the SIP account h as never diale d a number . Call Statistics Phone This field displays the WiMAX Modem’ s phone port number . Hook This field indicates whether the phone is on the hook or off the h[...]

Chapter 21 The Status Screen User’s Guide 245 21.2.5 WiMAX Profile Click Status > WiMAX Profile to open this screen. This read-only screen displays informat ion about the se curity settin gs yo u are using. T o configure these settings, go to the ADVANCED > WAN Configurat ion > Internet Connection screen. Note: Not all WiMAX Modem models[...]

Chapter 21 Th e Sta tus Screen User’s Guide 246 T TLS Inner EAP This field displays the type of secondary authentication method. Once a secure EAP- TTLS connection is established, the inner EAP is the protocol used to exchange security info rmation between the mobile station, the base station and the AAA server to authenticate the mobile station.[...]

247 P ART VI T roubleshooting and S p ecifications T roubleshooting (249) Product Specifications (257)[...]

248[...]

User’s Guide 249 C HAPTER 22 Troubleshooting This chapter offers some suggesti ons to solv e problems y ou might encounter . The potential problems are divided into the following categories: • P ower , Hardware Connections, and LEDs • WiMAX Modem Access and Log in • Internet Access • Phone Calls and VoIP • Re set the WiMAX Modem to Its [...]

Chapter 22 Tro u blesh oo tin g User’s Guide 250 2 Check the hardware connection s. See the Quick Start Guide. 3 Inspect your cables for damage. Cont act the vendor to replace any damaged cables. 4 Disconnect and re-connect the po wer adapter to the WiMAX Modem. 5 If the problem continues, contac t the vendor . 22.2 WiMAX Modem Access and Login I[...]

Chapter 22 Trou bleshooting User’s Guide 251 • If you changed t he IP address ( Section 6.2 on page 66 ), use the new IP address. • If you c hanged the IP address and have f orgotten it, see the troubleshooti ng suggestions for I forgot the IP address for the WiMAX Modem. 2 Check the hardware connections, and ma k e sure the LEDs are behav i [...]

Chapter 22 Tro u blesh oo tin g User’s Guide 252 I cannot T elnet to the WiMAX Modem. See the troubleshooting suggestions for I cannot see or access the Login screen in the web configu rator . Ignore the suggestions about y our browser . 22.3 Internet Access I cannot access the Internet. 1 Check the hardware connections, and ma k e sure the LEDs [...]

Chapter 22 Trou bleshooting User’s Guide 253 I cannot access the Internet any more. I had access to the Internet (with the WiMAX Modem), but my Internet connection is not available any more. 1 Check the hardware connections, and ma k e sure the LEDs are behav i n g as expected. See the Quick Start Guide and Section 1.2.1 on page 33 . 2 Disconnect[...]

Chapter 22 Tro u blesh oo tin g User’s Guide 254 22.4 Phone Calls and V oIP The telephone port won’t work or the te lephone lacks a dial tone. 1 Check the telephone connections and telephone wire. 2 Make sur e you h ave t h e VOICE > Service Config uratio n > SIP Settings screen properly configured ( Chapter 12 on page 131 ). I can access[...]

Chapter 22 Trou bleshooting User’s Guide 255 22.5 Reset the WiMAX Modem to It s Factory Default s If you reset the WiMAX Modem, you lose al l of the changes you have made. The WiMAX Modem re-loads its default se tti ngs, and the password resets to 1234 . Y ou have to mak e all of your changes again. Y ou will lose all of your changes when yo u pu[...]

Chapter 22 Tro u blesh oo tin g User’s Guide 256[...]

User’s Guide 257 C HAPTER 23 Product Specifications This chapter gives detai ls about your WiMAX Modem’ s hardware and firmw are features. T able 109 Environmental an d Hardware Specifications FEATURE DESCRIPTION Operating T emperature -40°C to 60°C (ODU), -5°C to 55°C (IDU) Storage T emperature -40°C to 65°C (ODU), -25°C to 60°C (IDU) [...]

Chapter 23 Product Specifications User’s Guide 258 T able 1 10 Radio Specifications FEATURE DESCRIPTION WiMAX Operating Frequency MAX -306M1: 2.5~2.7 GHz MAX -316M1: 3.4~3.6 GHz Channel Bandwidth 5MHz / 10MHz Maximum T ransmit Power 26dbm with ODU antenna deployed. WiMAX Compliance Compliant to receiv er performances defined in IEEE P802.16-2005,[...]

Chapter 23 Product Specifications User’s Guide 259 DHCP DHCP (Dynamic Host Con fig uration Protocol) allows the individual clients (computers) to obtain the TCP/IP configuration at start-up from a centralized DHCP serv er . Y our device has built-in DHCP server capability enabled by default. It can assign IP addresses, an IP default gateway and D[...]

Chapter 23 Product Specifications User’s Guide 260 T able 1 12 Standards Supported ST ANDARD DESCRIPTION RFC 768 User Datagr am Protocol RFC 791 Internet Protocol v4 RFC 792 Internet Control Message Protocol RFC 792 T ransmission Control Protocol RFC 826 Address Resolution Protocol RFC 854 T elne t Protocol RFC 1349 T ype of Service Protocol RFC [...]

Chapter 23 Product Specifications User’s Guide 261 IEEE 802.3 10BASE5 10 Mbit/s (1.25 MB/s) IEEE 802.3u 100 BASE- TX, 100BASE- T4, 100BASE-FX F ast Ethernet at 100 Mbit/s (12.5 MB/s) with auto-negotiation T able 1 13 Voice Features Call Park and Pickup Call park and pickup lets you put a call on hold (park) and then continue the call (pickup). Th[...]

Chapter 23 Product Specifications User’s Guide 262 Call waiting This feature allows you to hear an alert when you are already u sing the phone and another person calls y ou. Y ou can then either reject the new incoming call, put your cu rrent call on hold and receive the new incoming call, or end the current call and receive the new incoming call[...]

Chapter 23 Product Specifications User’s Guide 263 T o take full advantage of the supplementa ry phone services av ailable through the WiMAX Modem's phone port, y ou may need to subscribe to the services from your voice account service provider . Not all features are supported by all se rvice pro viders. Consult y our service provider for mo[...]

Chapter 23 Product Specifications User’s Guide 264[...]

265 P ART VII Appendices and Index WiMAX Security (267) Setting Up Y our Computer ’ s IP Address (271) P op-up Windows, Jav aScripts and Java P ermissions (299) IP Addresses and Subnetting (309) Importing Certificates (321) SIP P assthrough (353) Common Services (355) Legal Information (359) Customer Support (363)[...]

266[...]

User’s Guide 267 A PPENDIX A W iMAX Security Wireless security is vital to protec t your wireless communications. Without it, information tr ansmitted o ver the wirel ess network would be acces sible to any networking device within range. User Authentication and Dat a Encryption The WiMAX (IEEE 802.16) standard employs us er authentication and en[...]

Appendix A WiMAX Security User’s Guide 268 RADIUS RADIUS is based on a cl ient-serv er model that supports authenticat ion, authorization and acco unti ng. The base station is t he client and the server is the RADIUS server . The RADIUS server handles the followi ng tasks: • Authentication Determines the iden tity of the u sers. • Authorizati[...]

Appendix A WiMAX Security User’s Guide 269 the network. In ad di t io n to t he s hare d key , password information exchanged is also encrypted to protect the ne twork from unauthorized access. Diameter Diameter (RFC 3588) is a t ype of AAA server that pro vides sever al improvements over RADIUS in efficiency , security , and support for roaming.[...]

Appendix A WiMAX Security User’s Guide 270 Authentication The WiMAX Modem support s EAP- TTLS authenti cation. EAP-TTLS (T unneled T ransport Layer Service) EAP- T TLS is an extension of the EAP- TLS authentication that uses certi ficates for only the server-side authen tications to establi sh a secure connection (with EAP- TLS digital certificat[...]

User’s Guide 271 A PPENDIX B Setting Up Y our Computer ’ s IP Address Note: Y our specific ZyXEL device may not support all of the operating systems described in this appendix. See the produc t specifications for mo re information about which operating systems are sup ported. This appendix shows you how to conf igure the IP setti ngs on your c [...]

Appendix B Se tting Up Your Computer’s IP Addres s User’s Guide 272 Windows XP/NT/2000 The following example us es the default Windows XP displa y theme but can al so apply to Wind ows 2000 and Windows NT . 1 Click Start > Control Panel . Figure 107 Windows XP: S tart Menu 2 In the Control Panel , click the Network Connections icon. Figure 1[...]

Appendix B Setting Up Your Compu te r’s IP Address User’s Guide 273 3 Right- click Local Area Connection and then select Properties . Figure 109 Windows XP: Control Panel > Ne twork Connections > Properties 4 On the General tab, select Internet Protocol (TCP/IP) and then click Properties . Figure 1 10 Windows XP: Local Area Connection Pr [...]

Appendix B Se tting Up Your Computer’s IP Addres s User’s Guide 274 5 The Internet Protocol TCP/IP Properties window opens. Figure 1 1 1 Windows XP: Internet Protocol (TCP/IP) Propertie s 6 Select Obtain an IP address automatically if your network admi nistrator or ISP assigns your IP addres s dynamically . Select Use the following IP Address a[...]

Appendix B Setting Up Your Compu te r’s IP Address User’s Guide 275 Windows V ist a This section shows screens from Windows Vista Professional. 1 Click Start > Control Panel . Figure 1 12 Windows V ista: S tart Menu 2 In the Control Panel , click the Network and Internet icon. Figure 1 13 Windows V ista: Control Panel 3 Click the Network and[...]

Appendix B Se tting Up Your Computer’s IP Addres s User’s Guide 276 4 Click Manage network conne ctions . Figure 1 15 Windows V ista: Network and Sharing Cen ter 5 Right- click Local Area Connection and then select Properties . Figure 1 16 Windows V ista: Network and Sharing Cen ter Note: During this procedure, click Continue whenever Windo ws [...]

Appendix B Setting Up Your Compu te r’s IP Address User’s Guide 277 6 Select Internet Protocol Version 4 (TCP/IPv4) and then select Properties . Figure 1 17 Windows V ista: Local Area Connection Properties[...]

Appendix B Se tting Up Your Computer’s IP Addres s User’s Guide 278 7 The Internet Protocol Versio n 4 (TCP/IPv4) Properties window opens. Figure 1 18 Windows V ista: Internet Protocol V ersion 4 (TCP/IPv4) Properties 8 Select Obtain an IP address automatically if your network admi nistrator or ISP assigns your IP addres s dynamically . Select [...]

Appendix B Setting Up Your Compu te r’s IP Address User’s Guide 279 Mac OS X: 10.3 and 10.4 The screens in this section are from Mac OS X 10.4 but can also apply to 10.3. 1 Click Apple > System Preferences . Figure 1 19 Mac OS X 10.4: Apple Menu 2 In the System Preferences window , click the Network icon. Figure 120 Mac OS X 10.4: System Pr [...]

Appendix B Se tting Up Your Computer’s IP Addres s User’s Guide 280 3 When the Network preferences pane opens, select Built-in Ethernet from the network connection type list, and then click Configure. Figure 121 Mac OS X 10.4: Network Preferences 4 For d ynamically assigned settings, select Using DHCP from the Configure IPv4 list in the TCP/IP [...]

Appendix B Setting Up Your Compu te r’s IP Address User’s Guide 281 5 For s tatically assigned settings, do t he following: •F r o m t h e Configure IPv4 list, select Manually . •I n t h e IP Address field, type your IP address. •I n t h e Subnet Mask field, t ype your subnet mask. •I n t h e Router field, t ype the IP address of your d[...]

Appendix B Se tting Up Your Computer’s IP Addres s User’s Guide 282 Click Apply Now and clo se the window . V erifying Settings Check your TCP/IP properties by clicking Applications > Utilities > Network Utilities , and then selecting the appropriat e Network Interface from the Info tab. Figure 124 Mac OS X 10.4: Network Utility[...]

Appendix B Setting Up Your Compu te r’s IP Address User’s Guide 283 Mac OS X: 10.5 The screens in this section are from Mac OS X 10.5. 1 Click Apple > System Preferences . Figure 125 Mac OS X 10.5: Apple Menu 2 In System Preferences , click the Net work icon. Figure 126 Mac OS X 10.5: Systems Preferences[...]

Appendix B Se tting Up Your Computer’s IP Addres s User’s Guide 284 3 When the Network preferences pane opens, select Ethe rnet from the list of available conn ecti on ty pes. Figure 127 Mac OS X 10.5: Network Preferences > Ethernet 4 From the Configure lis t, sele ct Using DHCP for dynamically assigned settings. 5 For s tatically assigned s[...]

Appendix B Setting Up Your Compu te r’s IP Address User’s Guide 285 •I n t h e Router field, enter the IP address of your WiMAX Modem. Figure 128 Mac OS X 10.5: Network Preferences > Ethernet 6 Click Apply and close the wi nd ow .[...]

Appendix B Se tting Up Your Computer’s IP Addres s User’s Guide 286 V erifying Settings Check your TCP/IP properties by clicking Applications > Utilities > Network Utilities , and then selecting the appropriat e Network interface from the Info tab. Figure 129 Mac OS X 10.5: Network Utility Linux: Ubuntu 8 (GNOME) This section shows y ou h[...]

Appendix B Setting Up Your Compu te r’s IP Address User’s Guide 287 1 Click System > Administration > Network . Figure 130 Ubuntu 8: System > Administration Menu 2 When the Network Settings wi ndow opens, click Unl ock to open the Authenticate window . (By default, the Unloc k button is greyed out until clicked. ) Y ou cannot make chan[...]

Appendix B Se tting Up Your Computer’s IP Addres s User’s Guide 288 3 In the Authenticate window , enter your admin a ccount name and password then click the Authenticate button. Figure 132 Ubuntu 8: Administrator Account Authentication 4 In the Network Settings window , select the connection that you wa nt to configure, then click Properties .[...]

Appendix B Setting Up Your Compu te r’s IP Address User’s Guide 289 5 The Properties dialog box opens. Figure 134 Ubuntu 8: Network Settings > Properties •I n t h e Configuration list, select Automatic Configuration (DHCP) if you have a dynamic IP address. •I n t h e Configuration li st, select Static IP address if you hav e a static IP [...]

Appendix B Se tting Up Your Computer’s IP Addres s User’s Guide 290 7 If you know yo ur DNS server IP address(es), click the DNS tab in the Net work Settings window and then enter the DNS se rv er information in the fields provided. Figure 135 Ubuntu 8: Network Settings > DNS 8 Click the Close button to apply the changes. V erifying Settings[...]

Appendix B Setting Up Your Compu te r’s IP Address User’s Guide 291 tab. The Interface Statistics column shows data if your connection is working properly . Figure 136 Ubuntu 8: Network T ools[...]

Appendix B Se tting Up Your Computer’s IP Addres s User’s Guide 292 Linux: openSUSE 10.3 (KDE) This section shows y ou how to configure y o ur computer’s T CP/IP settings in the K Desktop Environment (KDE) using the openSUSE 10.3 Linux distribution. The procedure, screens and file locations may vary depend i ng on your specific distribution, [...]

Appendix B Setting Up Your Compu te r’s IP Address User’s Guide 293 2 When the Run as R oot - KDE su dialog opens, enter the admin password and click OK . Figure 138 openSUSE 10.3: K Menu > Computer Menu 3 When the YaST Contro l Center window opens, select Network Devices and then clic k the Network Card icon. Figure 139 openSUSE 10.3: Y aST[...]

Appendix B Se tting Up Your Computer’s IP Addres s User’s Guide 294 4 When the Network Settings window opens, click the Overview tab, select the appropriate connection Name from the list, and then c lick the Co nfigure button. Figure 140 openSUSE 10.3: Ne twork Settings[...]

Appendix B Setting Up Your Compu te r’s IP Address User’s Guide 295 5 When the Network Card Setup window opens, click the Address tab Figure 141 openSUSE 10.3: Ne twork Card Setup 6 Select Dynamic Address (DHCP) if you ha ve a dynamic IP add ress. Select Statically assigned IP Address if y ou ha ve a static IP address. Fill in the IP address , [...]

Appendix B Se tting Up Your Computer’s IP Addres s User’s Guide 296 8 If you know yo ur DNS server IP address(es), click the Hostname/DNS tab in Network Settings and then enter the DNS server informat ion in the fields provided. Figure 142 openSUSE 10.3: Ne twork Settings 9 Click Finish to sa ve your settings and close the window .[...]

Appendix B Setting Up Your Compu te r’s IP Address User’s Guide 297 V erifying Settings Click the KNetwork Manager icon on the Task bar t o check your T CP/IP properties. From the Option s sub-m enu, se lect Show Connectio n Information . Figure 143 openSUSE 10.3: KNet work Manager When the Connection Statu s - KNetwork Manager window opens, cl[...]

Appendix B Se tting Up Your Computer’s IP Addres s User’s Guide 298[...]

User’s Guide 299 A PPENDIX C Pop-up Windows, JavaScript s and Java Permissions In order to use the web configurator you need to allow: • W eb browser pop-up wind ows from your device. • Jav aScripts (enabled by defaul t). • Jav a permissions (enabled by default). Note: Internet Explorer 6 screens are used here . Screens for other Internet E[...]

Appendix C Pop-up Windows, JavaScripts and Java Perm issions User’s Guide 300 1 In Internet Explorer , select Tools , Internet Options , Privacy . 2 Clear the Block pop-ups check box in the Pop-up Blocker sect ion of the screen. This disables an y web pop-up block ers you may have enabled. Figure 146 Internet Options: Privacy 3 Click Apply to sav[...]

Appendix C Pop-up Windows, JavaScripts and Java Per missio ns User’s Guide 301 2 Select Settings… to open the Pop-up Blocker Settings screen. Figure 147 Internet Options: Privacy 3 T ype the IP address of y our device (the web page that you do not want to have blocked) wi th the prefix “http://” . For example, http:// 192.168.167.1.[...]

Appendix C Pop-up Windows, JavaScripts and Java Perm issions User’s Guide 302 4 Click Add to mo ve the IP address to the list of Allowed sites . Figure 148 Pop-up Blo cker Settings 5 Click Close to return to the Privacy screen. 6 Click Apply to save this setting. JavaScript s If pages of the web configur ator do not display properly i n Internet [...]

Appendix C Pop-up Windows, JavaScripts and Java Per missio ns User’s Guide 303 1 In Internet Explorer , click Tools , Internet Options and then the Security tab. Figure 149 Internet Options: Secu rity 2 Click the Custom Level... button . 3 Scroll down to Scriptin g . 4 Under Active scripting make sure that Enable is selected (the default). 5 Unde[...]

Appendix C Pop-up Windows, JavaScripts and Java Perm issions User’s Guide 304 6 Click OK to close the window . Figure 150 Security Settings - Java Scripting Java Permissions 1 From Internet Explorer , click Tools , Internet Options and then the Security tab. 2 Click the Custom Level... button . 3 Scroll down to Microsoft VM . 4 Under Java permiss[...]

Appendix C Pop-up Windows, JavaScripts and Java Per missio ns User’s Guide 305 5 Click OK to close the window . Figure 151 Security Settings - Java JA V A (Sun) 1 From Internet Explorer , click Tools , Internet Options and then the Advanced tab. 2 Make sure that Use Java 2 for <applet> under Java (S un) is selected.[...]

Appendix C Pop-up Windows, JavaScripts and Java Perm issions User’s Guide 306 3 Click OK to close the window . Figure 152 Java (Sun) Mozilla Firefox Mozilla Firefo x 2.0 screens are used here . Screens for other versions ma y vary . Y ou can enable Java, Javascript s and pop-ups in one screen. Click Tools, then click Options in the screen that ap[...]

Appendix C Pop-up Windows, JavaScripts and Java Per missio ns User’s Guide 307 Click Content .to show the screen below. Select the chec k boxes as shown in the following screen. Figure 154 Mozilla Firefox Content Security[...]

Appendix C Pop-up Windows, JavaScripts and Java Perm issions User’s Guide 308[...]

User’s Guide 309 A PPENDIX D IP Addresses and Subnetting This appendix introduces IP addresses and subnet masks. IP addresses identify indi vidual devices on a network. Every networking device (including computers, serv ers, routers, printers, etc.) needs an IP address to communicate across the netw ork. These networking devices are also known as[...]

Appendix D IP Addresses a nd Subnetting User’s Guide 310 The following figure shows an example IP address in which the first three octets (192.168.1) are the network number , and the fourth octet (16) is the host ID . Figure 155 Network Number and Host ID How much of the IP address is the networ k number and how much is the host ID varies accordi[...]

Appendix D IP Addresses and Subnetting User’s Guide 31 1 By conv ention, subnet masks alw ays cons ist of a continuous sequence of ones beginning from the leftmost bit of the mask, followed by a continuous sequence of zeros, for a total number of 32 bits. Subnet masks can be referred to by the size of the network number part (the bits with a “1[...]

Appendix D IP Addresses a nd Subnetting User’s Guide 312 Not ation Since the mask is alw ays a continuo us number of ones beginning f rom the left, followed by a continuous number of zeros for the remainder of the 32 bit mask, you can simply specif y the number of ones instead of writing the v alue of each octet. Th is is us ua lly spec if i e d [...]

Appendix D IP Addresses and Subnetting User’s Guide 313 The following figure shows the company network before subnetting. Figure 156 Subnetting Example: Before Subnetting Y ou can “borrow” one of the host ID bits to divide the network 192.168.1.0 into two separate sub-networks. The subnet mask is now 25 bits (25 5.255.255.128 or /25). The “[...]

Appendix D IP Addresses a nd Subnetting User’s Guide 314 The following figure shows the company network after subnet ting. There are now two sub-n etworks, A and B . Figure 157 Subnetting Example: Af ter Subnetting In a 25-bit subnet the host ID has 7 bits , so each sub-net work has a maximum of 2 7 – 2 or 126 possibl e hosts (a host ID of all [...]

Appendix D IP Addresses and Subnetting User’s Guide 315 Each subnet contains 6 host ID bit s, giving 2 6 - 2 or 62 hosts for each subnet (a host ID of all zeroes i s the subnet it self , all ones is the subnet’ s broadcast address). T able 1 19 Subnet 1 IP/SUBNET MASK NETWORK NUMBER LAST OCTET BIT VA L U E IP Address (Decimal) 192.168.1. 0 IP A[...]

Appendix D IP Addresses a nd Subnetting User’s Guide 316 Example: Eight Subnet s Similarly , use a 27-bit mask to create eig ht subnets (000, 001, 010, 011, 100, 101, 110 and 111). The following table shows IP address last octet values for each sub net. Subnet Planning The following table is a summary for subnet planning on a network with a 24-bi[...]

Appendix D IP Addresses and Subnetting User’s Guide 317 The following table is a summary for subnet planning on a network with a 16-bit network number . Configuring IP Addresses Where you obtain your network number depends on your particular situation. If the ISP or your network administrat or assigns you a block of registered IP addresses, follo[...]

Appendix D IP Addresses a nd Subnetting User’s Guide 318 address that you entered. Y ou don't need to change the subnet mask computed by the WiMAX Modem unless you are instruct ed to do otherwise. Private IP Addresses Every machine on the In ternet must ha ve a uni que address. If your ne tworks are isolated from the Internet (running only b[...]

Appendix D IP Addresses and Subnetting User’s Guide 319 address to computer A or setting computer A to obtain an IP address automatically . Figure 158 Conflicting Compute r IP Addres ses Examp le Conflicting Router IP Addresses Example Since a router connects different networks, it must have inte rfaces u sing di fferent network numbers. F or exa[...]

Appendix D IP Addresses a nd Subnetting User’s Guide 320 The computer cannot access the Internet. This prob lem can be solved by assigning a different IP address to t he computer or the router ’ s LAN port. Figure 160 Conflicting Compu ter and Router IP Addresses Example[...]

User’s Guide 321 A PPENDIX E Importing Certificates This appendix shows you how to import public k ey certificates into your web browser . Public key certificates are used by web br owsers to ensure that a secure web site is legitimate. When a certificate authorit y such as V eriSign, Comodo , or Network Solutions, to name a few , receives a ce r[...]

Appendix E Imp or ting Ce rtif icat es User’s Guide 322 Internet Explorer The following example uses Microsoft Internet Explorer 7 on Windows XP Professional; however , they can also appl y to Internet Explorer on Wind ows Vista. 1 If your device’ s web configur ator i s set to use S SL certifi cation, then the f irst time you browse to i t you[...]

Appendix E Importi ng Cer tificates User’s Guide 323 3 In the Address Bar , click Certificate Error > View certificates . Figure 163 Internet Explorer 7: Cert ificate Error 4 In the Certificate dialog bo x, click Install Certificate . Figure 164 Internet Explorer 7: Cert ificate[...]

Appendix E Imp or ting Ce rtif icat es User’s Guide 324 5 In the Certificate Import Wizard , click Next . Figure 165 Internet Explorer 7: Cert ificate Import Wizard 6 If you w ant Internet E xplorer to Automatically select certificate store based on the type of certificate , click Next again and then go to step 9. Figure 166 Internet Explorer 7: [...]

Appendix E Importi ng Cer tificates User’s Guide 325 7 Otherwise, se lect Place all certificates in the following store and then click Browse . Figure 167 Internet Explorer 7: Cert ificate Import Wizard 8 In the Select Certificate Store dialog box, choose a location in which to sa ve the certificate and then clic k OK . Figure 168 Internet Explor[...]

Appendix E Imp or ting Ce rtif icat es User’s Guide 326 9 In the Completing the Certificate Import Wizard screen, click Finish . Figure 169 Internet Explorer 7: Cert ificate Import Wizard 10 If you are presented with another Security Warning , c lick Yes . Figure 170 Internet Explorer 7: Security W arning[...]

Appendix E Importi ng Cer tificates User’s Guide 327 11 Finally , click OK when presented with the successful certificate installation message. Figure 171 Internet Explorer 7: Cert ificate Import Wizard 12 The next time you start Internet Explor er and go to a Z yXEL web configurator page, a sealed padlock icon appears in the address bar . Click [...]

Appendix E Imp or ting Ce rtif icat es User’s Guide 328 Inst alling a St and-Alone Certific ate File in Internet Explorer Rather t han browsing to a Z yXEL web co nfigur ator and installing a public key certificate when prompted, y ou can install a stand- alone certific ate file if one has been issued to you. 1 Double-click the public key cert if[...]

Appendix E Importi ng Cer tificates User’s Guide 329 Removing a Certificate in Internet Explorer This section shows you how to remove a publi c key certificate in Internet Explorer 7. 1 Open Internet Explorer and click TOOL S > Internet Options . Figure 175 Internet Explorer 7: T ools Menu 2 In the Internet Options dialog box, cl ick Conte nt [...]

Appendix E Imp or ting Ce rtif icat es User’s Guide 330 3 In the Certificates dialog box, click the Trusted Root Certificates Authorities tab, select the certificat e that yo u w ant to delete, and then click Remove . Figure 177 Internet Explorer 7: Cert ificates 4 In the Certificates confirmation, click Yes . Figure 178 Internet Explorer 7: Cert[...]

Appendix E Importi ng Cer tificates User’s Guide 331 6 The next time you go to the web site that issued the public k ey certificate you just removed, a certification error appears.[...]

Appendix E Imp or ting Ce rtif icat es User’s Guide 332 Firefox The following example uses Mozilla Firefox 2 on Windows XP Professional; however , the screens can also apply to Firefox 2 on all platforms. 1 If your device’ s web configur ator i s set to use S SL certifi cation, then the f irst time you browse to i t you are presented with a cer[...]

Appendix E Importi ng Cer tificates User’s Guide 333 3 The certificate is stored and you ca n now connect secu rely to the web configurator . A sealed padlock appears in the address bar , which you can click to open the Page Info > Security windo w to view the web page’ s security informat ion. Figure 181 Firefox 2: Page Info[...]

Appendix E Imp or ting Ce rtif icat es User’s Guide 334 Inst alling a St and-Alone Ce rtificate File in Firefox Rather t han browsing to a Z yXEL web co nfigur ator and installing a public key certificate when prompted, y ou can install a stand- alone certific ate file if one has been issued to you. 1 Open Firefox and click TOOLS > Options . F[...]

Appendix E Importi ng Cer tificates User’s Guide 335 3 In the Certificate Manager dialog box, cl ick Web S ites > Import . Figure 184 Firefox 2: Cert ificate Manager 4 Use the Select File dialog bo x to locate the certificate and then click Op en . Figure 185 Firefox 2: Select File 5 The next time you visit the web site, click the padlock in t[...]

Appendix E Imp or ting Ce rtif icat es User’s Guide 336 Removing a Certificate in Firefox This section shows y ou how to remove a public key certificate in Fi refox 2. 1 Open Firefox and click TOOLS > Options . Figure 186 Firefox 2: T ools Menu 2 In the Options dialog box, click ADVANCED > Encryption > View Certificates . Figure 187 Fire[...]

Appendix E Importi ng Cer tificates User’s Guide 337 3 In the Certificate Manager dialog box, select the Web Sites tab , select the certificate that you w ant to remove, and then click Delete . Figure 188 Firefox 2: Cert ificate Manager 4 In the Delete Web Site Certificates dialog bo x, cli ck OK . Figure 189 Firefox 2: Delete W eb Site Certifica[...]

Appendix E Imp or ting Ce rtif icat es User’s Guide 338 Opera The following example uses Opera 9 on Wi ndows XP Professional; however , the screens can apply to Opera 9 on all pl atforms. 1 If your device’ s web configur ator i s set to use S SL certifi cation, then the f irst time you browse to i t you are presented with a certificati on error[...]

Appendix E Importi ng Cer tificates User’s Guide 339 3 The next time you visit the web site, click the padlock in the address bar to open the Security information window to view the web page’ s securit y details. Figure 191 Opera 9: Security information[...]

Appendix E Imp or ting Ce rtif icat es User’s Guide 340 Inst alling a St and-Alone Ce rtificate File in Opera Rather t han browsing to a Z yXEL web co nfigur ator and installing a public key certificate when prompted, y ou can install a stand- alone certific ate file if one has been issued to you. 1 Open Opera and click TOOLS > Preferenc es . [...]

Appendix E Importi ng Cer tificates User’s Guide 341 2 In Preferences , click ADVANCED > Security > Manage certificates . Figure 193 Opera 9: Prefer ences[...]

Appendix E Imp or ting Ce rtif icat es User’s Guide 342 3 In the Certificates Manager , click Authorities > Import . Figure 194 Opera 9: Certificate manager 4 Use the Import certificate dialog box to locate the certificate and then click Open. Figure 195 Opera 9: Import certif icate[...]

Appendix E Importi ng Cer tificates User’s Guide 343 5 In the Install authority certificate dialog box, c lick Ins tall . Figure 196 Opera 9: Inst all authority certificate 6 Next, click OK . Figure 197 Opera 9: Inst all authority certificate 7 The next time you visit the web site, click the padlock in the address bar to open the Security informa[...]

Appendix E Imp or ting Ce rtif icat es User’s Guide 344 Removing a Certificate in Opera This section shows y ou how to remove a public k ey certificate in Oper a 9. 1 Open Opera and click TOOLS > Preferenc es . Figure 198 Opera 9: T ools Menu 2 In Preferences , ADVANCED > Security > Manage certificates . Figure 199 Opera 9: Prefer ences[...]

Appendix E Importi ng Cer tificates User’s Guide 345 3 In the Certificates manager , se lect th e Authorities tab, se le ct the cert if icate that you wan t to rem ove , an d the n c lic k Delete . Figure 200 Opera 9: Certificate manager 4 The next time you go to the web site that issued the public k ey certificate you just removed, a certificati[...]

Appendix E Imp or ting Ce rtif icat es User’s Guide 346 Konqueror The following example uses K onqueror 3.5 on openSUSE 10.3, however the screens apply to K onqueror 3.5 on all Linux KDE distributions. 1 If your device’ s web configur ator i s set to use S SL certifi cation, then the f irst time you browse to i t you are presented with a certif[...]

Appendix E Importi ng Cer tificates User’s Guide 347 4 Click the padlock in the addr ess bar to open the KDE SSL Information window and view the web page’ s security details. Figure 203 Konqueror 3.5: KDE SSL Information[...]

Appendix E Imp or ting Ce rtif icat es User’s Guide 348 Inst alling a St and-Alone Ce rtificate File in Konqueror Rather t han browsing to a Z yXEL web co nfigur ator and installing a public key certificate when prompted, y ou can install a stand- alone certific ate file if one has been issued to you. 1 Double-click the public key cert ificate fi[...]

Appendix E Importi ng Cer tificates User’s Guide 349 3 The next time you visit the web site, click the padlock in the address bar to open the KDE SSL Inf ormation window to view the web page’ s security details.[...]

Appendix E Imp or ting Ce rtif icat es User’s Guide 350 Removing a Certificate in Konqueror This section shows y ou how to remove a public k ey certificate in K onqueror 3.5. 1 Open Konqueror and click Settings > Configure Konque ror . Figure 207 Konquero r 3.5: Settings Menu 2 In the Configure dial og box, select Crypto . 3 On the Peer SSL Ce[...]

Appendix E Importi ng Cer tificates User’s Guide 351 Note: There is no confirmation wh en you remove a certificate authority , so be absolutely certain you want to go through with it before clicking the button.[...]

Appendix E Imp or ting Ce rtif icat es User’s Guide 352[...]

User’s Guide 353 A PPENDIX F SIP Passthrough Enabling/Disabling the SIP ALG Y ou can turn off the WiMAX Modem SIP ALG to avoid retr anslating the IP address of an existing SIP device that i s using STUN. If you w ant to use STUN with a SIP client device (a SIP phone or IP phon e for example) behind the WiMAX Modem, use the ip alg disable ALG_SIP [...]

Appendix F SIP Pas sth ro ug h User’s Guide 354[...]

User’s Guide 355 A PPENDIX G Common Services The following table lists some commonl y-used services and their associated protocols and port numbers. F or a comprehe nsiv e list of p ort numbers, ICMP type/ code numbers and services , visit the IANA (Internet Assigned Number Authority) web site. • Name : This is a short, descrip tive name for th[...]

Appendix G Com m o n Ser vice s User’s Guide 356 ESP (IPSEC_TUNNEL) User -Defined 50 The IPSEC ESP (Encapsulation Security Protocol) tunneling protocol uses this service. FINGER TCP 79 Finger is a UNIX or Internet related command that can be used to find out if a user is logged on. FTP TCP TCP 20 21 File T ransfer Program, a progr am to enable fa[...]

Appendix G C ommon Ser vices User’s Guide 357 PPTP TCP 1723 Point -to-P oint T unneling Protocol enables secure transfer of data ov er public networks. This is the control channel. PPTP_TUNNEL (GRE) User -Defined 47 PPTP (P oint -to-Point T unneling Protocol) enables secure transfer of data over public networks. This is the data channel. RCMD TCP[...]

Appendix G Com m o n Ser vice s User’s Guide 358 TFTP UDP 69 T rivial File T ransfer Protocol is an Internet file transfer protocol similar to FTP , but uses the UDP (User Datagram Protocol) r ather than TCP (T ransmission Control Protocol). VDOLIVE TCP 7000 Another videoconferencing solution. T able 126 Commonly Used Services (continued) NAME PR[...]

User’s Guide 359 A PPENDIX H Legal Information Copyright Copyright © 2008 by Z yXEL Communications Corpor ation. The contents of this publication ma y not be reproduced in any part or as a whole, transcrib ed, stored in a retriev al syst em, tr anslated into an y language , or transmitted in an y form or by any me ans, electronic, mechanical, ma[...]

Appendix H Lega l Inform a tio n User’s Guide 360 Certifications Federal Communications Commissi on (FCC) Interference St atement The device complies with P art 15 of F CC rules. Operation is subjec t to th e following tw o conditio ns: • This device compl ies with part 15 of the FCC Rules. • Operation i s subject to the condition th at thi s[...]

Appendix H Legal Information User’s Guide 361 第十四條 低功率射頻電 機之使用不得影響飛航安全及干擾 合法通信；經發現 有干擾現象時，應立即停用，並 改善至無干擾時方得繼續使用。 前項合法通信，指依電信規定作 業之無線電信。低功率射頻電機須 忍 受合法通信或?[...]

Appendix H Lega l Inform a tio n User’s Guide 362 implied, including any impli ed warranty of merchantability or f itness for a particular use or purpose. Z yXEL shall in no event be held liable for indirect or consequential damages of any kind to the purchaser . T o obtain the services of this w arr anty , con tac t your vend or . Y ou may als o[...]

User’s Guide 363 A PPENDIX I Customer Support In the event of probl ems that cannot be solved by using t his manua l, you s hould contact your vendor . If you canno t cont act your vendor , then contact a ZyXEL office for the region in which you bou g ht the device. Regional offices are listed below (see also http://www .zyxel .com/w eb/contact_u[...]

Appendix I Customer Support User’s Guide 364 China - ZyXEL Communicat ions (Shanghai) Corp. • Support E-mail: cso.zycn@zyx el.cn • Sales E-mail: sales@zyxel. cn • T elephone: +86-021-61199055 • F ax: +86-021-52069033 • Address: 1005F , ShengGao International T ower , No.137 XianXia Rd. , Shanghai • W eb: http://www .zyxel.cn Cost a Ri[...]

Appendix I Customer Support User’s Guide 365 • F ax: +358-9-4780-8448 • W eb: www.zyx el.fi • Reg ul a r M a il : ZyXEL Communications Oy , Malminkaari 10, 00700 Helsinki, Finland France • E-mail: in fo@zyxel.fr • T elephone: +33-4-72-52-97-97 • F ax: +33-4-72-52-19-20 • W eb: www.zyx el.fr • Reg ul a r M a il : ZyXEL Fr ance, 1 r[...]

Appendix I Customer Support User’s Guide 366 Jap an • Support E-mail: support@zyxel.co .jp • Sales E-mail: zyp@zyxel.co.jp • T elephone: +81-3-6847-3700 • F ax: +81-3-6847-3705 • W eb: www.zyx el.co.jp • R egular Mail: Z yXEL Japan, 3F , Office T&U, 1-10-10 Hig ashi-Gotanda, Shinagawa-ku, T okyo 141-0022, Japan Kazakhst an • Sup[...]

Appendix I Customer Support User’s Guide 367 • Sales E-mail: sales@zyxel.no • T elephone: +47-22-80-61-80 • F ax: +47-22-80-61-81 • W eb: www.zyx el.no • Reg ul a r M a il : ZyXEL Communications A/S, Nils Hansens vei 13, 0667 Oslo, Norway Poland • E-mai l: in fo@pl. zy xel.com • T elephone: +48-22-333 8250 • F ax: +48-22-333 8251 [...]

Appendix I Customer Support User’s Guide 368 Sweden • Support E-mail: support@zyxel.se • Sales E-mail: sales@zyxel. se • T elephone: +46-31-744-7700 • F ax: +46-31-744-7701 • W eb: www.zyx el.se • Reg ul a r M a il : ZyXEL Communications A/S, Sjöporten 4, 41764 Göteborg, Swed en Ta i w a n • Support E-mail: support@zyxel.com.tw ?[...]

Appendix I Customer Support User’s Guide 369 • F ax: +380-44-494-49-32 • W eb: www.ua.zyx el.com • Reg ul a r M a i l: ZyXEL Ukr aine, 13, Pimonenko Str . , Kiev 04050, Ukraine United Kingdom • Support E-mail: support@zyxel.co .uk • Sales E-mail: sales@zyxel. co.uk • T elephone: +44-1344-303044, 0845 122 0301 (UK only) • F ax: +44-1[...]

Appendix I Customer Support User’s Guide 370[...]

Index User’s Guide 371 Index A AAA 87 AbS 136 accounting server see AAA ACK message 143 activity 87 Advanced Encryption Standard see AES AES 269 ALG 11 6 alternative subnet mask notation 312 analysis-by-synthesis 136 Application Layer Gatewa y see ALG authentication 44 , 87 , 89 , 267 inner 270 key server 87 types 270 authorization 267 request an[...]

Index User’s Guide 372 CMAC see MAC codec 135 comfort noise 149 contact information 363 copyright 359 CoS 146 counter mode see CCMP cover age area 85 cryptograph y 267 customer support 363 D data 267 – 269 decryption 267 encryption 267 flow 269 DHCP 74 , 120 , 122 client 120 server 74 diameter 87 Differentiated Services see DiffServ DiffServ 14[...]

Index User’s Guide 373 inner authentication 270 Internet access 87 Internet Assigned Numbers Authority see IANA 318 Internet T elephony Service Provider see ITSP interoperability 85 IP-PBX 131 ITSP 131 ITU- T 149 K key 44 , 89 , 267 request and reply 269 L listening port 139 M MAC 269 MAN 85 Management Information Base (MIB) 208 manual site surve[...]

Index User’s Guide 374 Q QoS 215 Quality of Service, see QoS R RADIUS 87 , 268 Message T ype s 268 Messages 268 Shared Secret Key 268 R eal-time T ransport Protocol see RTP redirect server SIP 145 register server SIP 132 registration product 362 related documentation 3 remote management and NA T 204 remote management limitations 204 required band[...]

Index User’s Guide 375 T tampering TCP/IP configur ation 74 TEK 269 TFTP restrictions 204 three-way conference 155 , 157 TLS 44 , 89 , 267 transport encryption k ey see TEK transport lay er security see TLS triangle route problem 195 solutions 196 trigger port forwarding process 11 5 TT L S 44 , 89 , 267 , 270 tunneled TLS see T TLS U unauthorize[...]

Index User’s Guide 376[...]