Accton Wireless Broand WiMAX User Manual
4 ADMINISTRATOR MODE
The WiMAX USB Adapter has an Administrator Mode for configuring profiles
and accessing the Advanced Configuration settings.
Administrator Mode is intended for qualified service personnel only.
ACCESSING ADMINISTRATOR MODE
Administrator Mode is accessed through the key sequence “Alt + t,” which
prompts for a password.
The password for Administrator Mode is “wimax123” (case sensitive).
Figure 30: WCM Change Mode
Once in Administrator Mode, the user can create, edit, and delete profiles,
configure authentication settings, and access the Advance Configuration
screen.
Using the key sequence “Alt + t” a second time exits Administrator Mode.
– 30 –
Figure 31: Administrator Mode
C
HAPTER
4
| Administrator Mode
Setting Profiles
SETTING PROFILES
The WCM profiles allow a user to set their specific details for connecting to
various WiMAX networks. The WCM utility must have at least one profile
configured and set as the Default Profile” to be able to connect to a WiMAX
service.
The WCM allows up to ten profiles to be configured. You can create, edit,
and delete profiles in the list. One profile must be set as the “Default
Profile.”
– 31 –
Figure 32: Setting Profiles
C
HAPTER
4
| Administrator Mode
Setting Profiles
CREATING A NEW
PROFILE
Clicking the Create button on the Profile screen displays the Create Profile
window.
Figure 33: Create Profile Screen - General Tab
– 32 –
C
HAPTER
4
| Administrator Mode
Setting Profiles
The General tab on this screen displays the following items:
Profile Name — A name used to identify the new profile (up to 20
characters).
Select Service Provider — The ID number and name of the WiMAX
network operator for this profile. You can click the Add button to add other
operator names and IDs.
Figure 34: Add Operator
Operator Restriction — When set to “Home Operator,” the user can only
connect to the service provider specified in the profile. When set to “No
Operator Restriction,” the operator specified in the profile is used when the
network is detected, otherwise the user can roam to other networks.
Connection Mode — When set to “Auto Connection” the utility will use the
profile settings to automatically scan and connect to a WiMAX network.
Power Save Mode — To save power, the card can operate in one of three
modes:
◆ High: The card will go to sleep and idle whenever it can.
◆ Medium: The card will go to sleep and idle only after a predefined
time.
◆ Application Optimized: The card will go to sleep and idle only when
the PC operating system allows it.
Save as Default Profile — Saves the profiles settings and sets it as the
default.
Clicking the Scan tab on the Add Profile screen displays the profile
frequency and bandwidth settings.
– 33 –
Figure 35: Create Profile Screen - Scan Tab
C
HAPTER
4
| Administrator Mode
Setting Profiles
The Scan tab on the Add Profile screen displays the following items:
Frequency — Specifies a center frequency to scan.
Bandwidth — Specifies the bandwidth of the channel; 5, 7, 8.75, or
10 MHz.
Clicking the Authentication tab on the Add Profile screen displays the user
authentication settings.
– 34 –
C
HAPTER
Figure 36: Create Profile Screen - TTLS Authentication
4
| Administrator Mode
Setting Profiles
The Authentication tab on the Add Profile screen displays the following
items:
Enable Authentication — Enables user authentication for connection to
the network.
EAP Method — Selects the Extensible Authentication Protocol (EAP)
method to use for authentication. When EAP-TTLS or EAP-TLS is selected,
the appropriate parameters need to be configured.
◆ EAP-TTLS-MSCHAPV2 — Tunneled Transport Layer Security with
Microsoft’s version 2 of CHAP (Challenge-Handshake Authentication
Protocol). This security method provides for certificate-based, mutual
authentication of the client and network through an encrypted channel.
Unlike EAP-TLS, EAP-TTLS requires only server-side certificates. The
MS-CHAP protocol requires a user name and password to be
configured. The user name and password can be up to 50 characters.
(The following characters are not permitted; /\|”?@#$%^&*():;<>,.)
◆ EAP-TLS — Transport Layer Security. Provides for certificate-based and
mutual authentication of the client and the network. It relies on clientside and server-side certificates to perform authentication and can be
used to dynamically generate user-based and session-based encryption
keys to secure subsequent communications between the user and the
network.
– 35 –
C
HAPTER
4
| Administrator Mode
Setting Profiles
Outer Identity — The Network Access Identifier (NAI) text string that is
used to identify the home authentication realm for device authentication
during roaming. The NAI string (defined in RFC 4282) is used to proxy an
authentication request to another remote server. The authentication is then
performed using the unique X.509 authentication certificate included with
the device. The string can be defined by three methods:
◆ MAC: Uses the device MAC address as part of the identity.
◆ RANDOM: Uses a generated random number of 26 hexadecimal digits.
◆ CUSTOMIZE: Allows the whole string to be defined as required.
Trust CA Certificate — The security certificate issued by a recognized
certification authority (CA) that is used for mutual authentication with the
authentication server when EAP-TLS is used. The browse button can be
used to locate the file on the host PC.
Certificate in EEPROM — Indicates if the device certificate, key, and
password is included in memory on the device. If the certificate files are
not in EEPROM, they can be located or specified using the following fields.
◆ Client Certificate — The name of the file on the host PC that contains
the device security certificate. The browse button can be used to locate
the file.
◆ Client Private Key — The name of the file on the host PC that contains
the encryption key for use with the security certificate.
◆ Client Private Key Password — The required password for the
private key.
User name — A text string used by EAP-TTLS-MSCHAPV2 to identify the
user to the authentication server.
Password — The password used by EAP-TTLS-MSCHAPV2 to confirm the
identity of the user to the authentication server.
– 36 –
Loading...