The Pocket VoIP Gateway offers a user-friendly web-based management interface
for the configuration of all the unit’s features. Any PC directly attached to the unit can
access the management interface using a web browser, such as Internet Explorer
(version 6.0 or above), Fir ef ox ( version 1.5 or above), or Op er a (v er si on 8 .5 1 or
above).
The initi al co nf igu r ati on st ep s c an be m ade th ro ug h t he we b br ow s er i nt er fa ce usi ng
the Setup Wizard. It is recommended to make the initial changes by connecting a
PC directly to the Pocket VoIP Gateway’s LAN port.
Operating Modes
The Pocket VoIP Gateway operates in one of three possible modes:
• Gateway
• Wireless Client
• Access Po i nt
The Pocket VoIP Gateway’s Setup Wizard and Adv an ced Configuration menus
display only settings tha t are valid for the current operat ing mode. Before making
any configuration settings, be sure the unit is operating in the mode you want to use.
In its default Automatic Con f iguration setting, the unit starts in Gate way mode if the
WAN port has a valid connection. If the WAN por t has no connection, it starts in
Wireless Client mode.
To set the unit in Access Point mode requires manual configuration. After logging in,
you must first use the Advanced Setup menu to set the mode. See “Manually Setting
the Operating Mode” on page 1- 3.
Accessing the Web Management Interface
The Pocket VoIP Gateway has a default IP a ddr ess of 192.168.7.1 and a subnet
mask of 255.255.255.0. If your PC uses DHCP or has an IP address on the same
subnet (that is, the PC and Pocket VoIP Gateway addresses both start 192.168.7.x),
you can connect immediately to the web interface. Otherwise, you must first change
your PC’s IP address to be on the same subnet as the Pocket VoIP Gateway.
1-1
Page 12
Introduction
1
In the web browser’s address bar, type the default IP address: http://192.168.7.1.
The web browser displa ys t he Pocket VoIP Gateway’s home page.
Figure 1-1. Home Page
Logging In – Type the default password “admin” and click Login. For information on
configuring a password, see “Administrator Settings ” on page 6-4.
The Main Menu displays.
Figure 1-2. Main Menu
To configure basic settings for the current operating mode, click Start with Setup
Wizard. For more information, see “Using the Setup Wizard” on page 2-1.
Alternatively, to configure more detailed settings, click Start with Advanced Setup.
For more information, see “The Advanced Setup Menus” on page 1-2.
The Advanced Setup Menus
The Advanced Setup menus display only features that are valid for the Pocket VoIP
Gateway’s current operat in g m ode. Each menu is sumari zed below with links to the
relevant section in this guide where configuration parameters are described in detail.
1-2
Page 13
Manually Setting the Operating Mode
Gateway Mode:
• Status – Display system informa tion. see page 9-1
• System – Configure the mode and other settings.see page 6-1
• WAN – Configure WAN port connection settings.see page 3-3
• LAN – Configure LAN settings.see page 3-6
• Wireless – Configure wireles s access settings.see page 7-1
• Firewall – Configure firew all settings.see page 3-10
Access Point Mode:
• Status – Display system informa tion. see page 9-1
• System – Configure the mode and other settings.see page 6-1
• Wireless – Configure wireles s access settings.see page 7-1
• VoIP – Configure VoIP sett ings.see page 8-1
Wireless Client Mode:
• System – Configure the mode and other settings.see page 4-2
• VoIP – Configure VoIP sett ings.see page 8-1
Manually Setting the Operating Mode
1
To set an operating mode for the Pocket VoIP Gateway that is not dependent on the
WAN port connection, you must access the Advanced Configuration, System, Mode
Configuration page.
Note: Access Point mode can only be set through manual configuration.
Follow these steps:
1.Log into the web interface .
2.Click Start with Advanced Setup.
3.From the menu (in any mod e) , cli ck S yst e m, then Mode Config.
4.Set the Mode Selection to Man ual, then select the operatin g m ode you want to
use.
5.Click Apply to confirm the sett in g and restart the unit.
Note: Changing the Pocket VoIP Gateway ’s operating mode always resets the unit.
1-3
Page 14
Introduction
1
Figure 1-3. Manually Setting the Operating Mode
For more information on the Mode Configuration page, see “Mode Configuration” on
page 6-2.
1-4
Page 15
Chapter 2: Using the Setup Wizard
The Pocket VoIP G ate way ca n auto mat ical ly confi gure it s op era ting m ode f or us e as
a gateway or wireless client. However, it still requires some manual configur ation for
other modes, its WAN port connection, wireless settings, and VoIP functions. The
Setup Wizard takes you through the basic configuration steps for the current
operating mode.
Note: Th e Setup Wizard steps depend on the current operating mode. You should first
make sure the Pocket VoIP Gateway starts in the mode that you want to use.
Launching the Setup Wizard – To per f orm basic conf iguration, click Start with
Setup Wizard on the main me nu.
Figure 2-4. Starting the Setup Wizard
The following sections detail the necessary steps in config uring the Pocket VoIP
Gateway in each of its operati ng modes.
Gateway
When configuring the unit to operate as a gateway, you will need to proceed through
the following four steps:
1.Settings – The Settings page takes you through the wireless SSID (Service Set
Identifier) configuratio n.
2-1
Page 16
Using the Setup Wizard
2
ESSID (Extended Service Set Identifier) – The ESSID is a name that uniquely
identifies the wireless network provided by the Pocket VoIP Gateway. Clients
that want to connect to the wireless network must set their SSID to the same as
that of the Pocket VoIP Gateway.
SSID Broadcast – Check this box to disabl e br oadcasting the configu re d
ESSID. The Pocket VoIP Gateway is configured by default as an “open
system,” which broadcasts a beacon signal includin g t he co nf i gur ed ESSID.
Wireless clients with a configur ed SSID of “ANY” can read the SSID from the
beacon, and automatically set their SSID to allow imme diat e connection to the
Pocket VoIP Gateway. When disabled, the Pocket VoIP Gateway does not
include its ESSID in beacon messages. This provides a basic level of security,
since wireless clients must be pre-configured with the ESSID to connect to the
Pocket VoIP Gateway.
Figure 2-5. Gateway Settings
2.WAN Type – The WAN Type page is for specifying t he WAN p ort connect ion to
your Internet service prov i der (ISP) . Wh en one of the four options is speci fie d,
the Wizard displays th e appropriate configuratio n param e t er s.
Figure 2-6. Gateway WAN Type
2-2
Page 17
Gateway
Dynamic-IP Cable Modem – Selects conf ig ur at io n fo r a ca bl e mod e m Int er net
connection.
Fixed-IP xDSL – Selects configuratio n f or a fixed IP address xDSL Internet
connection.
Dial Up xDSL (PPPoE) – Selects conf igura ti on f or an Int erne t co nnec tion usi ng
the Point-to-Point Protocol over Ethernet (PPPoE).
3.WAN Settings – The WAN Settings page displays the configuration settings for
the WAN Type that you have selected. The following example displays a Cable
Modem selection.
Figure 2-7. Gateway WAN Type - Cable Modem
For a cable modem connection, the unit requires no fu rther configuration and
prompts you to move to step four.
2
Figure 2-8. Gateway WAN Type - Fixed-IP xDSL
For a fixed IP xDSL connection, you are prompted for the follo w ing i nf or m at ion
(as supplied by your ISP):
IP Address – If your ISP has as si gne d you a fixed IP address, enter the
address here.
Subnet Mask – Enter the subnet mask as supplied by y our ISP.
2-3
Page 18
Using the Setup Wizard
2
ISP Gateway Address – The gateway IP address of your ISP.
For a dial-up xDSL (PPPoE) connection you are prompted for th e fo llowing
information:
User Name – Enter your user name for connecting to the xDSL service, as
supplied by your ISP. (Range: 1-32 characters)
Figure 2-9. Gateway WAN Type - Dial-Up xDSL
Password – Specify the password for your xDSL connection, as supplied by
your ISP. (Default: No password)
Service Name – Enter the xDSL service name (if any) as supplied by your ISP.
MTU (1400~1492) – The Maximum Transmission Unit for Ether net data
transmission. Only ch ange the default value if spe cif ic al ly in st ru ct ed by your
ISP. (Range: 1400~1492 bytes)
Maximum Idle Time (1~99 ) – The maximum length of inactive time the unit will
stay connected to the xDSL service provider before disconnecting. This feature
only works when Auto-Reconnect is selected. (Range: 1~99 minutes)
Auto-reconnect – Selecting this option prompts the unit to reconnect to the
xDSL service provid er a fter the connection has been los t.
2-4
Page 19
Gateway
4.VoIP (Voice over Internet Protocol) – The VoIP page allows you to co nf igur e
SIP (Session Initiation Proto col) param e te rs for enabling Internet telephony.
VoIP service providers operate SIP “proxy ser ver s” th at al lo w you to register
your Pocket VoIP Gateway on their syst em so tha t you can make telephone
calls over the Internet. Your VoIP service provider will provide you with the
connection details that need to be set up on the Pocket VoIP Gateway to be
able to use their service.
Figure 2-10. Gateway VoIP Configuration
2
Proxy Server Address – Address of the VoIP service provider proxy server.
Proxy Server Port – The TCP port number used by the VoIP service provider’s
proxy server. (Default: 5060)
User Authentication Name – An alphanumeric string that un iq uel y ide nt ifies
the user to the SIP server, as supplied by the VoIP service provider.
User Authentication Password – An alphanumeric string that uniquely
identifies the SIP user’s permission rights, as supplied by t he VoIP service
provider.
2-5
Page 20
Using the Setup Wizard
2
Wireless Client
When configuring the uni t to operate as a wireless client, yo u w i ll ne ed t o pr oceed
through the following tw o st eps:
1.Settings – The settings page takes you through the process of searching and
selecting the access poi nt to wh ic h yo u w ant to connect.
If you know the SSID of the wireless network, you can enter it directly in the text
box provided. Otherwise, you may perform a wireless scan to detect all access
points that are within range, and then select the access point you want to
connect to from a list.
Figure 2-11. Wireless Client Settings
Site Survey – Performs a wireless scan on all chan nel s to de te ct al l nearby
access points. A list of deteced ac cess points is displayed from which you can
select an access poi nt to co nnect to.
Selected AP SSI D – Enter the service set identifier of the wireless network you
want to connect to. The SSID is case sensitive and can co nsist of up t o 32
alphanumeric chara cters.
WEP Key – WEP (Wireless E quivalent Privacy) provides a basic level of
security in wireless netw o rks, it prevents unauthorized access by encrypting
data transmitted between wireless clients and an access point. WEP uses static
shared keys (fixed-length hexadecimal or alphanumeric strings) that ar e
manually distributed to all clients that want to use an access point. If the
wireless network you ar e connecting to uses WEP security, you need to enter
the WEP key provided to yo u by the net w or k operator.
Show Connection Status – Displays t he connection status of the unit to th e
selected access point.
2-6
Page 21
Wireless Client
Figure 2-12. Wireless Client Site Survey
The Site Survey page displays a li st of a ccess points that are within range for
connection.
Upon selection of a suitable access point, the unit asks yo u to confirm if you
want to connect to tha t particular access point.
2
Figure 2-13. Confirm Wireless Client Connection
Clicking on Connection Status displays the status that the Pocket VoIP
Gateway has with the sel ected access point.
Figure 2-14. Wireless Client Connection Stat us
2-7
Page 22
Using the Setup Wizard
2
2.VoIP (Voice over Internet Protocol) – The VoIP page allows you to co nf igur e
SIP (Session Initiation Proto col) param e te rs for enabling Internet telephony.
VoIP service providers operate SIP “proxy ser ver s” th at al lo w you to register
your Pocket VoIP Gateway on their syst em so tha t you can make telephone
calls over the Internet. Your VoIP service provider will provide you with the
connection details that need to be set up on the Pocket VoIP Gateway to be
able to use their service.
Figure 2-15. Setup Wizard VoIP Settings
Proxy Server Address – Address of the VoIP service provider proxy server.
Proxy Server Port – The TCP port number used by the VoIP service provider’s
proxy server. (Default: 5060)
User Authentication Name – An alphanumeric string that un iq uel y ide nt ifies
the user to the SIP server, as supplied by the VoIP service provider.
User Authentication Password – An alphanumeric string that uniquely
identifies the SIP user’s permission rights, as supplied by t he VoIP service
provider.
2-8
Page 23
Access Point
Access Point
When configuring the uni t to operate as an access point, you need to proceed
through the following tw o st eps:
1.Settings – The Settings page takes you through the SSID (Service Set
Identifier) configuratio n.
Figure 2-16. Access Point Settings
ESSID (Extended Service Set Identifier) – The ESSID is a name that uniquely
identifies the wireless net work provided by the Pocket VoIP Gateway. Clients
that want to connect to the wireless network must set their SSID to the same as
that of the Pocket VoIP Gateway.
SSID Broadcast – Check this box to disabl e br oadcasting the configu re d
ESSID. The Pocket VoIP Gateway is configur ed by default as an “open
system,” which broadcasts a beacon signal includin g t he co nf i gur ed ESSID.
Wireless clients with a configur ed SSID of “ANY” can read the SSID from the
beacon, and automatically set their SSID to allow imme diat e connection to the
Pocket VoIP Gateway. When disabled, the Pocket VoIP Gateway does not
include its ESSID in beacon messages. This provides a basic level of security,
since wireless clients must be pre-configured with the ESSID to connect to the
Pocket VoIP Gateway.
2
2.VoIP (Voice over Internet Protocol) – The VoIP page allows you to co nf igur e
SIP (Session Initiation Proto col) param e te rs for enabling Internet telephony.
VoIP service providers operate SIP “proxy ser ver s” th at al lo w you to register
your Pocket VoIP Gateway on their syst em so tha t you can make telephone
calls over the Internet. Your VoIP service provider will provide you with the
connection details that need to be set up on the Pocket VoIP Gateway to be
able to use their service.
2-9
Page 24
Using the Setup Wizard
2
Proxy Server Address – Address of the VoIP service provider proxy server.
Proxy Server Port – The TCP port number used by the VoIP service provider’s
proxy server. (Default: 5060)
User Authentication Name – An alphanumeric string that un iq uel y ide nt ifies
the user to the SIP server, as supplied by the VoIP service provider.
User Authentication Password – An alphanumeric string that uniquely
identifies the SIP user’s permission rights, as supplied by t he VoIP service
provider.
Figure 2-17. Access Point VoIP Configuration
2-10
Page 25
Chapter 3: Gateway Mode
Operating in Gateway mode, the Pocket VoIP Gateway provides comprehensive
firewall features and NAT isolation for Internet traffic passing from the WAN port to
wireless clients, or to a local network connected to the LAN port.
The DHCP server feature can assign IP addresses for up to 32 local network PCs
and wireless clients. Full access point features are provided for wireless clients, with
robust security options available and QoS support for voice or video traffic.
Figure 3-1. Gateway Mode Settings
The information in this chap te r is or ganized to reflect the struc tu re of the we b
screens for easy refer enc e. D etail ed i nfo r m at i on o n system status, system setti ngs,
wireless settings, and VoIP are located in ot her chapters.
In Gateway Mode, the Advanced Setup menu includes the following options.
Table 3-1. Gateway Configuration Options
MenuDescriptionPage
StatusDisplays the current system status9-1
SystemConfigures basic administrative settings6-1
WANSets the connection method of your Internet service provider3-3
WAN TypeSelects the Internet connection method 3-3
Dynamic IPObtain an IP address automatically from your ISP3-3
IP SettingsSet a fixed IP address provided by your ISP3-3
PPPoESets up a PPPoE connection to your ISP3-3
DNSSpecifies DNS servers that you want to access3-4
DDNSSpecifies a dynamic DNS service to use3-5
LANConfigures IP settings for the local network3-6
LAN SettingsSets the unit’s IP address and configures the DHCP server
for the local network
3-6
3-1
Page 26
Gateway Mode
3
Table3-1. Gateway Configuration Options
MenuDescriptionPage
WirelessConfigures wireless settings7-1
Setting Sets the ESSID, radio channel, and other settings7-1
SecurityConfigures wireless encryption and authentication7-4
Wireless QoSControls QoS for traffic prioritization7-7
NATShares a single ISP account with multiple users, sets up
Virtual ServerAllows the unit to be configured as a virtual server3-7
Port MappingEnables IP port mapping for special applications3-8
DMZAllows cl ients to connect to the unit directly bypassing the
FirewallControls access to and from the local network with various
Firewall OptionsBlocks scans of the network services from an outside hacker3-10
Client FilteringBlocks internet access on an IP basis3-12
MAC ControlBlocks internet access on a MAC basis3-13
virtual servers
firewall
filtering options
3-7
3-9
3-10
3-2
Page 27
WAN
WAN
Specify the WAN connection parameters provided by your Internet Service Provider
(ISP).
WAN Type
Specifies the type of WAN connection to use from a list of opt ions. The selected
option depends on the device connected to the WAN port and your specific ISP
service.
3
Figure 3-2. Gateway Mode WAN Type
The unit can
• Dynamic-IP Cable Modem – Selects configuration for a cable modem Internet
connection.
• Fixed-IP xDSL – Selects config ur at io n f or a fixed IP address xDSL Intern et
connection.
• Dial Up xDSL (PPPoE) – Selects configuration for an Internet connection using the
Point-to-Point Protocol over Ethernet (PPPoE).
be connected to your ISP in one of the following ways:
3-3
Page 28
Gateway Mode
3
DNS
DNS (Domain Name Sy st em ) ser ver addresses are usually pro vi de d by service
providers, however if you want to specify certain ser ver s, th e D N S page allows you
to enter primary and secod ary DNS address es.
Figure 3-3. Gateway Mode DNS Setup
• Domain Name Server (DNS) Address – Address of the primary DNS serv er,
specified in the form of 0.0.0.0
• Secondary DNS Add res s (o pt io nal ) – Optional address of a secondary DNS
server, specified in the form of 0.0.0.0
3-4
Page 29
WAN
DDNS
Dynamic DNS (DDNS) provides users on the Internet wit h a meth od to tie a specific
domain name to the unit’s dynamically assigned IP address. DDNS allows your
domain name to follow your IP address automatically by changing your DNS records
when your IP address changes.
The Pocket VoIP Gateway provides acc ess to two DDNS service pr ovi d er s,
dyndns.org and dyns.cx. To set up an DDNS account, visit the websites of these
service providers at ww w.dyndns.org or w w w.dyns.cx.
Figure 3-4. Gateway Mode Dynamic DNS Setup
3
• DDNS Server – Specifies the DDNS service provider.
•Host Name – Specifies the prefix to identify your presence on the DDNS server.
•User Name – Specifies your username for the DDNS service.
• Password – Specifies your passw or d f or the D D N S service.
3-5
Page 30
Gateway Mode
3
LAN
The Pocket VoIP Gateway must have a va lid I P address for management usi ng a
web browser and to sup por t other features. The unit has a def ault IP address of
192.168.7.1. You can use this IP address or assign another address that is
compatible with your exist in g l ocal network. The unit can also be enabled as a
Dynamic Host Configur ati on Pr ot ocol (DHCP) server to allo cat e I P addresses to
local PCs and wireless clients . The uni t supports up to 32 local clients.
LAN Settings
The Pocket VoIP Gateway includes a DHCP server that can assign temporary IP
addresses to any attached host re questing the service. Addr esses are assigned to
clients from a common addr ess pool configured on the un i t. C onfi gure an address
pool by specifying start and end IP addresses. Be sure no t to i ncl ude the unit's IP
address in the address po ol ran ge.
Figure 3-5. Gateway Mode LAN Setup
•IP Address – The IP address of the unit. Valid IP addresses consist of four decimal
numbers, 0 to 255, sepa ra te d by periods.The default set ting is 192. 168.7.1.
• Subnet Mask – Indicates the local subnet mask is fixed as 255.255.255.0.
• The Gateway acts as DHCP Server – Check this box to enable the DHCP server.
- IP Pool Starting/Ending Address – Specifies the start and end IP address of a
range that the DHCP server can allocate to DHCP clients. You can specify a
single address or an address range. Note that the address pool range is always
in the same subnet as the unit’s IP setting.
- Lease Time – Selects a time limit for the use of an IP address form the IP pool.
When the time limit expi re s, the clie nt has to request a new IP addres s.
3-6
Page 31
NAT
NAT
Network Address Translation (NAT) is a standard method of ma ppi ng multiple
"internal" IP addresses t o one "external" IP address on devi ces at the edge of a
network. For the Pocket VoIP Gateway, the internal (local) IP addresses are the IP
addresses assigned to PCs and wireless clients by the DHCP server, and the
external IP address is th e IP addr ess assigned to the WAN port.
Virtual Server
Using the NAT Virtual Server feature, remote users can ac cess different servers on
your local network using your single public IP addre ss.
Remote users access in g se rv ic es such as web or FTP at your loc al site tho ru gh
your public IP address, are redirected (mappe d) to other local server IP addre sses
and TCP/UDP port number s. For example, if you set Type/Public Port to TCP/80
(HTTP or web) and the Private I P/ P or t to 19 2. 168.7.9/80, then all HTTP req ue sts
from outside users forwarded to 192.168.7.9 on port 80. Therefore, by just using
your external IP addre ss pr ovided by your ISP, Internet users can access the
services they need at the l ocal addresses to which you r edi r ect th em .
The more common TCP ser vice port numbers include: HTT P: 8 0, FTP: 21, Telnet:
23, and POP3: 110.
3
Figure 3-6. Gateway Mode Virtual Server
•Private IP – The IP address of the server on the local Etherne t ne tw or k. The
specified address must be in the same subnet as the Pocket VoIP Gateway and its
DHCP server address pool.
• Private Port – Specifies the port number used on the local server for the service.
• Type – Specifies the port type. (Options: TCP or UDP; Default: TCP)
3-7
Page 32
Gateway Mode
3
•Public Port – Specifies the public port used for the service.
• Enabled – Enables the vir tu al ser ver mapping on the specifie d ports.
Port Mapping
Some applications, su ch as Internet gaming, videoc onferencing, Internet tel ep hony
and others, require mult ipl e connections. These app lica t ions cannot work with
Network Address Translation (NAT) enabled. If you need t o ru n applications that
require multiple connections, use port mapping to specify the additional public ports
to be opened for each app lic at io n.
Figure 3-7. Gateway Mode Port Mapping
•Private IP – The IP address of the local server.
• Mapping Ports Format: port, port-port – Specifi es the ports that the applicat ion
requires. The ports may be sp ecif i ed i ndividually, in a range, or a combination of
both. For example, 7, 11, 57, 72-96.
• Enabled – Enables port ma pping for the specified IP addresst.
3-8
Page 33
NAT
DMZ
If you have a client PC that cannot run an Internet applicat io n pr operly from behind
the NAT firewall, you can open the client up to unrest ricted two-way internet ac cess
by defining a virtual-DMZ (virtual-demilitarized-zone) host.
Figure 3-8. Gateway Mode DMZ
• Enable – Enables the feature.
• IP Address of Virtual DMZ Host – Specifies the IP address of the virtual D M Z
host. (Default: 0.0.0.0)
Note: Adding a host to the DMZ may expose your local network to a variety of security
risks, so only use this option as a last resort.
3
3-9
Page 34
Gateway Mode
3
Firewall
The Pocket VoIP Gateway provides extensive firewall protection by restricting
connection parameters t o lim it the risk of intrusion and def end in g against a wide
array of common hacker attacks. However, for applications that re qui r e unr estricted
access to the Internet, you can configure a specific cli ent/server as a demilitarized
zone (DMZ).
Figure 3-9. Gateway Mode Firewall Setting
• Enable – Enables the featur e.
• Disable – Dis ables the feature.
3-10
Page 35
Firewall
Firewall Options
The Pocket VoIP Gateway’s firewall enables access control of client PCs, blocks
common hacker attacks, inc lu di ng IP Spoofing, Land Attack, Ping of Death, Smurf
Attack, TCP null scan, ICMP defect, and TCP SYN flooding. The firewall does not
significantly affect system performance and it is best to leave it enabled to protect
your network.
Figure 3-10. Gateway Mode Firewall Options
• Enable Hacker Attack Protect – Network attacks t hat deny access to a netw or k
device are called DoS attacks. DoS attacks are aimed at devices and networks with
a connection to the Internet. Their goal is not to steal information, but to disable a
device or network so users no longer have access to network resources. The VoIP
Router pr otects a gainst the f ollowing DoS attacks: IP Spoofing , Land Atta ck, Ping
of Death, Smurf Attack, TCP null scan , ICM P def ect, and TCP SYN flooding.
• Discard PING from WAN side – Prevents pings on the unit’s WAN port from being
routed to the network.
• Discard to PING the Gateway – Prevents any response to a ping to the unit’s IP
address.
• Drop Port Scan – Prevents outside hackers for m tes t ing th e TCP/UDP port
numbers on the unit for an y ser vi ces.
3
3-11
Page 36
Gateway Mode
3
Client Filter
You can block access to th e I nt er net from cl i en ts on the l ocal network by specifyi ng
IP address es, port numbers and types.
Figure 3-11. Gateway Mode Client Filter
• Enable Client Filter – Enables the feature.
•IP – Specifies an IP address or range on the local network.
•Port – Specifies a port number range to filter.
•Type – Specifies the connection type. (Default: TCP)
• Enable – Enables filtering for th e table entry.
3-12
Page 37
Firewall
MAC Control
You can block access to th e I nternet from clients on the local netw or k by MAC
addresses.
Figure 3-12. Gateway Mode MAC Control
• MAC Address Control – Enables the featu re .
• Block Connect to Internet – Blocks Internet acc ess for the scpecified MAC
address.
• MAC Address – Specifies a local PC MAC address.
• Add – Adds a MAC address to the filter table.
• Delete – Removes a MAC address from the f i lter table.
3
3-13
Page 38
3
Gateway Mode
3-14
Page 39
Chapter 4: Wireless Client Mode
Operating in Wireless Client mode, the Pocket VoIP Gateway can connect to an
802.11b/g wireless network, forwarding traffic fro m an at tached PC.
To access a wireless network in Wi r el ess C lient mode, connect your PC t o th e LAN
port and then set your PC’s network connection to DHCP. In Wireless Client mode,
the Pocket VoIP Gateway acts as a DHCP server to assign IP address settings to
one client connected on th e LAN port. Use the default IP addr ess, 192.168.7.1, to
access the web management interface. Using the Set up Wizard or from the Mode
Config page, you can then set up a connection to a nearby access point. See
“Connecting to an Access Point” on page 4-3.
Figure 4-1. Wireless Client Settings
The information in this chap te r is or ganized to reflect the struc tu re of the we b
interface pages for easy refer ence. All VoIP configuration information is lo ca te d in
Chapter 5.
The Advanced Configur at i on pages include the following o pt ions.
Table 4-1. Wireless Client Configuration Options
MenuDescriptionPage
SystemConfigures basic administrative and client access6-1
Mode ConfigSets up a client connection with a wireless network4-2
User SettingsCo nfig ure s user pas sw ord for ma nag em ent
System ToolsAllows you to restore the factory default settings, or store
System StatusDisplays current system information4-7
System LogDisplays system log events4-9
When operating in Wirel ess Client mode, you must se t a Se rv ic e Set Id entification
(SSID) to identify the wireless network service to which you want to connect. First
perform a site survey to find nearby available access points, then select the wireless
network service you want to use from the displayed list. If the wireless network uses
WEP security, enter a valid key provided by the service operator.
Figure 4-2. Wireless Client Mode Configuration
Mode Selection – Allows you to se lect Aut o configuration (2 operatin g m odes) or
• Auto – The unit automatically selects the operating mode depending on the WAN
port status.
- With no link on the WA N po rt , th e unit st ar ts up i n Wir e less Client mode.
- With a link on the W AN por t , the unit starts up in Gateway mo de.
• Manual – Allows you to manually select the mo de in which the unit operates:
- Gateway – The unit operates as a secure Internet gateway between a WAN port
connection and a wired LAN or wireless devices.
4-2
Page 41
Mode Configuration
- Wireless Client – The unit operates as a wireless client to connect to nearby
access points:
- Site Survey – Performs a wireless scan on all channels to det ec t all nearby
access points. A list of deteced access points is displayed from which you can
select an access poi nt to co nnect to.
- Selected AP SSID – Enter the service set identifier of the wireless network you
want to connect to. The SSID is case sensitive and can co nsist of up t o 32
alphanumeric chara cters.
- WEP Key – WEP (Wireless Equivalent Privacy) provides a basic level of
security in wireless netw o rks, it prevents unauthorized access by encrypting
data transmitted between w ire le ss clients and an access point. WEP uses
static shared keys (fixed-length hexadecimal or alphanumeric strings) that are
manually distributed to all clients that want to use an access point. If the
wireless network you are connecting to uses WEP security, you need to enter
the WEP key provided to yo u by the net w or k operator.
- Show Connection Status – Displays the connection status of the unit and the
selected access point.
- Access Point – The unit operates as an access point that passes data between
a wired network and wirel ess clients.
Connecting to an Access Point
To set up a wireless client connec tio n to an access point, perform the fo l lo win g
steps:
4
1.On the Mode Config page, clic k the Si te Sur vey button.
2.Wait about six to ten seconds for the radio scan to complete. When scan has
completed, a list of detected access points is displayed.
Figure 4-3. Wireless Client Site Survey
4-3
Page 42
Wireless Client Mode
4
3.From th e di s pl aye d list, select t he w ir el es s n et wor k E SSI D yo u wa nt to c on nec t
to by clicking the radio but to n.
4.Click the Connect AP butt on. A message displays to conf i rm i f y ou want to
connect to that particular access point. Click OK to complete the connection
and return to the Mode Co nf ig page.
Figure 4-4. Confirm Wireless Client Connection
5.From the Mode Config page, click Show Connection Status to confirm the client
connection.
4-4
Figure 4-5. Wireless Client Connection Status
Page 43
User Settings
User Settings
The User Settings page allows you to change the web interface management
access password and set th e i nt er fa ce logout time.
Figure 4-6. Wireless Client User Settings
• Current Password – Type your current passwo rd. (Default: admin)
• Password – Type a new password. (Range: 3~12 character s)
• Re-type Password – Type the new password agai n to co nf i rms it.
• Auto-Logout Time – Sets the time of no user activity after which the unit
terminates a web man agement session. (Defau l t: 30 m i nu te s; R ange: 1~99
minutes)
4
4-5
Page 44
Wireless Client Mode
4
System Tools
The System Tools page allows you to upload new runtime code to the unit , r estore
factory default settings, save and restore the unit’s conf ig ur at ion settings, and to
reset the unit.
Figure 4-7. Wireless Client Configuration Tools
• Firmware Update – Downloads an operation code file from the web management
station to the Pocket VoIP Gateway using HTTP. Use the Browse button to locate
the software code file locally o n th e m anagement station. Click Appl y t o pr oceed.
• Configuration Tools:
- Backup Settings – Saves the current configuration settings to a file on the web
management station.
- Restore Settings – Restores a saved configuration file to the unit.
• Restore Factory Default – Resets the unit to its factory default settings.
4-6
Page 45
System Status
• Reset Personal Gateway – Allows the user to reboot the unit.
System Status
The system status page display s connectivity status informat i on for th e unit’s
wireless and LAN interfaces, as well as firmware an d har dw are version numbers.
4
Figure 4-8. Wireless Client System Status
In Wireless Client mode, the Pocket VoIP Gateway requests an IP address from the
wireless network’s DHCP server. This IP address is used to route traffic from the
connected PC.
•IP – Displays the IP address provided by DHCP.
• Subnet Mask – Displays the subnet mask provided by DHCP.
• Gateway – Displays the gateway address provided by DHCP.
4-7
Page 46
Wireless Client Mode
4
• DNS – Displays a configure d DN S address and any DNS add re ss assigned by
DHCP (displayed in parenthesis). The DNS IP can only be configured when in
Gateway mode.
• Secondary DNS – Disp la ys a configured secondary D N S address and any
secondary DNS address assigned by DHCP (displayed in parenthesis). The
secondary DNS IP can only be configured when in Gateway mode.
• Connection Type – Disp lays the c onnecti on type for the wirel ess interf ace (alw ays
DHCP for Wireless Client mode).
• Release – Releases the curre nt IP ad dress information.
• Reconnect – Initiates a new DHCP client request for an IP address.
LAN – Display system IP settings, as well as DHCP and firewall status:
• IP Address – D ispl ay s t he LAN port IP address. The IP add re ss can only be
configured when in Gateway mode.
• Subnet Mask – Displays the LAN port subnet mask.
• DHCP Server – Displays the LAN port DHCP server status. Displays “Enable” in
Wireless Client mode. In effect, on e DHCP clien t is supporte d, but th e serv er and
address pool cannot be configured.
• Firewall – Displays the firewall status. Wireless Client mode does not support any
firewall features.
Information – Displays the num ber of connected clients as w el l as th e unit’s
hardware and firmwar e ver si on numbers:
• Connected Clients – Displays the number of con nected clients, if any.
• Runtime Code Version – Displays the runtime code version.
• LAN MAC Address – Displays the LAN M A C ad dress.
• WAN MAC Address – Displays WAN MAC address.
• Hardware Version – Displays the hardware version number.
4-8
Page 47
System Log
The System Log page display s Pocket VoIP Gateway system events.
Figure 4-9. Wireless C lien t Sy stem Log
System Log
4
4-9
Page 48
Wireless Client Mode
4
4-10
Page 49
Chapter 5: Access Point Mode
Operating in Access Point mode, the Pocket VoIP Gateway provides 802.11b/g
connectivity for wireless clients, with rob ust security options avai l able and QoS
support for voice or vide o traffic .
In Access Point mode, the WAN and LAN ports act like two normal Ethernet swi t ch
ports. There are no firewall or NAT features for traffic passing between the WAN and
LAN ports or wireless clients. There is also no DHCP server to assign IP addresses
to connected clients. A configured DHCP server must exi st on the connected local
network to provide IP addresses to clients.
To access the web management interface in Access Point mode, connect directly to
the unit and used the defaul t IP address, 192.168.7.1. Alte rn at i vel y, if you want to
set an IP address that is com pat ib le with t he local network, use Gatew ay mode to
configure a fixed IP addre ss firs t, t hen change back to Access Poi nt m ode.
Figure 5-1. Access Point Mode Settings
Access Point mode conf ig ur at ion para m et er s ar e described in the relevant c hapter
of this guide. See the page referen ces below to locate feature inf ormation.
Table 5-1. Access Point Configuration Options
MenuDescriptionPage
StatusDisplays current system information9-1
SystemConfigures basic administrative and client access6-1
WirelessConfigures wireless connectivity7-1
Setting Configures the ESSID and other radio parameters7-1
SecurityConfigures wireless encryption and authentication7-4
Wireless QoSControls QoS for traffic prioritization7-7
The Pocket VoIP Gateway’s Advanced Setup System settings menu provides the
same configuration options in both Gateway and Access Point mode. These settings
allow you to change the operating mode, set the sys tem time, configure a
management acces s password, and upgrade the sy st em software.
Figure 6-1. System Settings
The information in this chap te r is or ga ni zed to reflect the structure of the Syst em
Setting web pages for easy refe re nce. However, it is recommended that you
configure a user password as th e fir st st ep under “Administrat or Set tings” on page
6-4 to control managem ent access to this device.
The System Se tting pages include the following options.
Table 6-1. System Setting
MenuDescriptionPage
Mode ConfigAllows you to set automatic, or manual configuration6-2
System TimeConfigures the system time settings for syncing with an SNTP server6-3
Administrator SettingsConfigures user password for managem ent
system management
Configuration ToolsAllows you to restore the factory default settings, or store your own
setting
UPnPProvides inter connectivity between Universal Plug and Play devices6-7
access; and remote
6-4
6-6
6-1
Page 52
System Settings
6
Mode Configuration
The Mode Configuration parameters for the unit can be left at their default settings
(Auto). However, manually selecting t he manner in which the unit operates allows
you to select Access Point mode and configure a grea ter r ange of parameters.
When operating in Wireless Client mode, you should set a Service Set Identification
(SSID) to identify the wireless network service to which you want to connect. Only
clients with the same SSID can associate with a wireless netw ork.
Figure 6-2. Mode Configuration
Mode Selection – Allows you to se lect Aut o configuration (2 operatin g m odes) or
• Auto – The unit automatically selects the operating mode depending on the WAN
port status.
- With no link on the WA N po rt , th e unit st ar ts up i n Wir e less Client mode.
- With a link on the W AN por t , the unit starts up in Gateway mo de.
• Manual – Allows you to manually select the mo de in which the unit operates:
- Gateway – The unit operates as a secure Internet gateway between a WAN port
connection and a wired LAN or wireless devices.
- Wireless Client – The unit operates as a wireless client to connect to nearby
access points:
- Site Survey – Performs a wireless scan of the area to detect access points.
- Selected AP SSID – The SSID of th e selected access point.
- WEP Key – The WEP key used for the selected access point.
6-2
Page 53
System Time
- Show Connection Status – Displays the connection status of the unit and the
selected access point.
- Access Point – The unit operates as an access point that passes data between
a wired network and wirel ess clients.
System Time
The Pocket VoIP Gateway uses the Simple Network Time Protocol (SNTP) to set its
internal clock based on pe riodic updates from a time serv er (SNTP or NTP).
Maintaining an accurate tim e on the device enables the system log to record
meaningful dates and tim es for event entries.
SNTP uses Coordinated Universal Time (or UTC, formerly Greenwich Mean Time,
or GMT) based on the time at the Earth’s prime meridian, zero degrees longitude. To
display a time corresp onding to your local time, you mu st sel ect your time zone.
6
Figure 6-3. System Time
6-3
Page 54
System Settings
6
Administrator Settings
The Admini strator Set tings page allows you to change the default pass w ord, set a
remote management IP address, and configure email alerts.
Figure 6-4. User Settings
• Administrator Settings – Use the administrator settings to change the password
and control the auto-logout time.
- Current Password – Pro m pts yo u t o ent er your current password. (Defaul t :
admin)
- Password – Pr om pts you to enter a new password. (Ran ge: 3~12 characters)
- Auto-Logout Time – The time of non-activity after which the unit terminates a
web management ses si on. (Default: 30 minutes; Ra nge: 1~99 minutes)
6-4
Page 55
Administrator Settings
• Remote Management – By default, management access is only available to users
on your local network, that is, those connected to the LAN port or wireless clients.
However, you can also manage the unit from a remote host through the WAN port
by entering a specific IP add ress or range of addresse s th at are al low ed access.
- Enable – Enables remote ma nagement.
- IP Address – Specifies an IP addr ess or address range that can be used for
remote management. Note that a “0” in the IP addre ss means that any host is
permitted. For example, an IP address specified as 212.120.68.0 means that
any host with an IP address in the range 212,120,68.1 to 212,120,68.255 will be
able to manage remotely. If you check Enable and leave the IP address as
0.0.0.0, any host can man age the unit remotely.
- Port – Specifies the TCP port to use fo r rem ot e m anagement. The remote
management port must be specified in the address field of your web browser, for
example, 212.220.168.20:8080.
• Email Notification – Enabling Email alerts for security logging of th e uni t.
- Email Notification Status – Enables/disables email notifications.
- Maximum Trigger Events – Sen ds an email message if the nu m ber of eve nts
exceeds this value.
- Mail Server – The address of the m ai l ser ver. Specified in the form of
mail.something.com.
- Recipient’s Email Address – The email address to send the alert message to.
Specified in the form of someone@something.com
- Email Subject – Allows the user to nam e th e subject of the alert message.
6
6-5
Page 56
System Settings
6
Configuration Tools
The Configurations Tools page allows you to upload new runtim e code to the unit,
restore factory default set t in gs , sa ve and restore the unit’s configur at i on s et tings,
and to reset the unit.
Figure 6-5. Configuration Tools
• Firmware Update – Downloads an operation code file from the web management
station to the Pocket VoIP Gateway using HTTP. Use the Browse button to locate
the code file locally on the ma nagement station and click Ap ply t o pr oceed.
• Configuration Tools:
- Backup Settings – Saves the current configuration settings to a file on the web
management station.
- Restore Settings – Restores a saved configuration file to the unit.
• Restore Factory Default – Resets the unit to its factory default settings.
• Reset Personal Gateway – Allows the user to rebo ot th e uni t .
6-6
Page 57
UPnP Settings
UPnP Settings
UPnP (Universal Plug and Play Forum) provides inter-connectivity between devices
supported by the same stan dard.
Figure 6-6. UPnP Settings
• Enable UPnP – Enables UPnP support for the devi ce.
6
6-7
Page 58
6
System Settings
6-8
Page 59
Chapter 7: Wireless Settings
The Pocket VoIP Gateway includes an IEEE 802.11g radio interface for wireless
communications. The Wireless set up pages inc lude configuration options for th e
radio signal characteristics, wireless security, and Quality of Service (QoS) features.
The config uration of wi r eless settings is available in Gateway Mode and Acces s
Point Mode only.
The Wireless configur at ion pages include the following op tions.
Table 7-1. Wireless Settings
MenuDescriptionPage
SettingsAllows you configure basic radio parameters7-1
SecurityConfigures wireless security features7-4
Wireless QoSConfigures Quality of Service (QoS) for wireless traffic7-7
Wireless Settings
From the Wireless menu, click on Settings to configure the unit’s radio interface. The
unit’s radio can operate in three mo des, IEEE, 802.11b & g, 802.11g only, and
802.11b only.
The IEEE 802.11g standard operates within the 2. 4 GH z band at up to 54 Mbps.
Note that because the IEE E 802 .11g standard is an extension of the IEEE 802.11b
standard, it allows clients with 802.11b wireless network cards to associate to an
802.11g access point.
7-1
Page 60
Wireless Settings
7
Figure 7-7. Wireless Settings
• Regulation Domain – Indicates the unit’s regulatory domain setting. Units
intended for use in the United States are configured to use only radio channels 1-11
at certain transmit power levels, as defined by FCC (Fe deral Communications
Commission) regulations. Setting this parameter to ETSI (Europe) or Japan allows
other appropriate channels and power levels to be used.
• Wlan Radio – Enables the wire less interface.
• ESSID – The Service Set ID. This sho ul d be s et to the sam e value as other
wireless device s in yo ur net work. The SSI D is ca se sensi tiv e and ca n cons ist of up
to 32 alphanumeric char act er s. (Default: PMG)
•AP Name – A descriptive name given to the unit for identification purposes on the
network.
• SSID Broadcast – Check th is box to disable broadcasting the configured ES SID.
The Pocket VoIP Gateway is configured by default as an “open system, ” wh ich
broadcasts a beacon signal including the configured E SS I D. Wireless clients with
a configured SSID of “ANY” can read the SSID from the beacon, and automatically
set their SSID to allow immediate connection to the Pocket VoIP Gateway. When
disabled, the Pocket VoIP Gateway does not include its ESSID in beacon
messages. This provides a basic level of securit y, since wireless clients mus t b e
pre-configured with the ESSID to connect to the Pocket VoIP Gateway.
• Operation Mode – Selects the opera tin g m ode for the 802.11g radio.
(Default: B/G Mixed Mode)
- B/G Mixed Mode: Both 802.11b and 802.11g clients can communicate with the
unit (up to 54 Mbps).
- G Only Mode: Only 802.11g clients can communicate wit h th e unit (up to
54 Mbps).
7-2
Page 61
Wireless Settings
- B Only Mode: Both 802.11b and 802.11g clients can communicate with the unit,
but 802.11g clients can only transfer data at 802.11b standard rates (up to
11 Mbps).
• Channel ID – The radio channe l us ed by t he unit and its clients to communicate
with each other. This channel must be the sam e on t he unit and all of its wireless
clients. The available channel settings are limited by local regulations. (Default: 6;
Range: 1-14)
Note: If you experience poor performance, you may be encountering interference from
another wireless device. Try changing the channel, as this may eliminate
interference and increase performance. Channels 1, 6, and 11, as the three
non-overlapping channels in the 2.4 GHz range, are preferred. (Default; Auto)
• Tx Preamble Type – IEEE 802.11 frames begin with an alternating pattern of 1s
and 0s called the pream ble, w hi ch tell s re ceiving stations that a frame is arr iv ing.
This provides time for the receiving station to synchronize to the incoming data
stream. This parameter sets the length of the signal preamble that is used at the
start of a data transmission. Using a short preamble (96 microseconds) instead of
a long preamble (192 microseconds) can increase data throughput on the unit, but
requires that all clients can su ppo rt a short preamble. (Default : Lo ng Preamble)
- Short Preamble: Sets the preamble t o sh or t for inc re ased througput.
- Long Preamble: Sets the preamble to long. Using a long preamble ensures the
unit can support all 802.11b and 802.11g clients.
- Auto: Sets the preamble according to the capability of clients that are curren tly
asscociated. Uses a short preamble if all associated clients can support it,
otherwise a long preambl e i s us ed.
• Beacon Interval (20~1000) – Sets the interval at which Beacon frames are
transmitted from the unit. The Beacon Interval unit is measured in TU, which
corresponds to 1024 mi cr oseconds. The beacon s ig nal s allow wireless clients to
maintain contact with the unit. The y m ay also carry power-management
information. (Range: 20 -1 000 TUs; Default: 100 TUs)
• RTS Threshold (0~2347) – Sets the packet size threshold at which a Request to
Send (RTS) signal must be sent to a receiving station prior to the sending the data
frame. The unit sends RTS frame s to a rec ei ving station to negotiate the sending
of a data frame. After receiving an RTS frame, t he station sends a CTS (clear to
send) frame to notify the unit that it can start sending data. If the RTS threshold is
set to 0, the unit always sends RTS signals. If set to 2347, the unit never sends
RTS signals. If set to any other value, and the packet size equal s or exceeds the
RTS threshold, the RTS/CTS (Request to Send / Clear to Send) mechanism will be
enabled. Units contendi ng for the medium may not be awar e of each other. The
RTS/CTS mechanism can solve this “Hidden Node Pro bl em . ” (R ange: 0-2347
bytes: Default: 2347 bytes)
• Fragmentation Threshold (0~2347) – Configures the minimum packet size that
can be fragmented wh en pass in g th ro ugh the unit. Fragmentation of th e PD Us
(Package Data Unit) can increase the reliability of transmissions because it
increases the probability of a successful transmission due to smaller frame size. If
there is significant interference present, or collisions due to high network utilization,
7
7-3
Page 62
Wireless Settings
7
try setting the fragment size to send smaller fragments. This will speed up the
retransmission of smaller frames. However, it is more efficient to set the fragment
size larger if very little or no in te rfer ence is present because it req ui re s overhead
to send multiple frame s. (R an ge: 256-2346 bytes; Def au lt: 2346 bytes)
Wireless Security
The Pocket VoIP Gateway’s wireless interfac e i s configured by default as an “o pen
system,” which broadcasts a beacon signal including the configured SSID. Wireless
clients with a configured SSID of “A NY ” can read the SSID from the beacon, and
automatically set their S SI D to a llow i m m ediate connection to the w i rele ss network.
To improve wireless netw or k security, you have to implement two main functi ons:
• Authentication – It must be verified that clients attempting to connect to the network
are authorized users.
• Traffic Encryption – Dat a passing between the uni t an d cli ents must be protected
from interception and ev esdropping.
For a more secure network, the access point can implement one or a combination of
the following security m ec hanisms:
• Wired Equivalent Privac y (W EP)
• IEEE 802.1X
• Wi-Fi Protected Access (WPA) or WPA2
The security mechanism s that may be employed de pend on the level of security
required, the network and management resou rc es avai l ab le , a nd t he software
support provided on w irel es s cl i ents.
7-4
Page 63
Wireless Security
To configure wireless security click on Security.
Figure 7-8. Wireless Security
• Encryption Type – Selects the data encryption meth od t o us e:
- None – No data encryption is used.
- Share – Use a WEP share key for encryption. If you choose to use WEP shared
keys, be sure to define at least one static WEP key. Also, be sure that the WEP
shared keys are the same for each client in the wireless network.
- 802.11X – Use IEEE 802.1X (802.1X) for user authentication and distributing
dynamically generat ed en cryption keys. IEEE 802.1 X is a stan dar d f ra m ew or k
for network access co nt ro l tha t us es a RADIUS server on the lo cal network for
user authentication. The 802. 1X standard uses the Extensibl e Aut he nt ic ati on
Protocol (EAP) to pass user crede ntia ls (eit he r digi tal cert ificates, usernames
and passwords, or other) from the client to the RADIUS server. The unit supports
TLS (Transport Layer Security) as its EAP type.
- TKIP – Use Temporal Key Integrity Protocol (TKIP) keys for encryption. WPA
specifies TKIP as the data encryption method to replace WEP. TKIP avoids the
problems of WEP static keys by dynamically changing data encryption keys.
- AES – Use Advan ced E ncr yption Standard (AES) keys for encryption. WPA2
uses AES Counter-Mod e en cr ypt i on with Cipher Block Chaining Message
Authentication Code (CBC-MAC) for message integrity. The AES
Counter-Mode/CBCMAC Protocol (AES-CCMP) provides extremely robust data
confidentiality using a 128-bit key. Use of AES-CCMP encryption is specified as
a standard requirement for WPA2. Before implementing WPA2 in the network,
be sure client devices are upgraded to WPA2-compliant hardware.
7
7-5
Page 64
Wireless Settings
7
- TKIP/AES – Use both TKIP and AES keys for encryption. WPA2 defines a
transitional mode of operation for networks moving from WPA security to WPA2.
WPA2 Mixed Mode allows both WPA and WPA2 clients to associate to a
common SSID interface. In mixed mode, the unicast encryption cipher (TKIP or
AES-CCMP) is negotiated for each client.
• Authentication Type – The authentication types available depend on the selected
encryption type. By first selecting the encryption type, only valid authentication
types are then displayed.
- Open System – No user authentication is used.
- Shared Key – Use a WEP share key for authentication. If you choose to use
WEP shared keys, be sure to defi ne at least one static WEP key. Also, be sure
that the WEP shared keys are the sam e for each client in the wireless net w or k.
- Auto Switch – Allows support of cl ient s using a static WEP key or no keys.
- WPA-TLS – The WPA enterprise mode that uses IEEE 802.1X and EAP-TLS to
authenticate users and to dynamically distrib ute encryption keys to clie nts.
Either TKIP or AES can be used as th e encryption cipher. Require s a R AD I US
server to be configured and available in the wired netw o rk .
- WPA-PSK – The WPA Pre-shared Key (PSK) mode for small networks that uses
a common password st r ing th at is ma nu al ly dist ributed. Requires the PSK
pass-phrase string to be entered. All wireless clients must be configured with the
same key to communicate with the unit. Either TKIP or AES can be used as the
encryption cipher.
- WPA2-TLS – The WPA2 enterprise mode that uses IEEE 802.1X and EAP-TLS
to authenticate users an d to dynamically distribute encr yption keys to clients.
Either TKIP or AES can be used as th e encryption cipher. Require s a R AD I US
server to be configured and available in the wired netw o rk .
- WPA2-PSK – T he WPA2 Pre-shared Key (PSK) mode for small networks that
uses a common password string that is manually distributed. Requires the PSK
pass-phrase string to be entered. All wireless clients must be configured with the
same key to communicate with the unit. Either TKIP or AES can be used as the
encryption cipher.
• Active Key / Key 1-4 – If yo u sel ect Shared Key encryp tion or authentication,
configure at least one sha red key by entering 10 (64 -b it) or 26 (12 8- bi t )
hexadecimal characters (0~9, A~F). Then select the active transmit key to use for
encryption.
Note: All wireless devices must be configured with the same Key ID values to
communicate with the unit.
• Radius Server IP – IP address of the Remote Authentication Dial-in User Service
(RADIUS) server. A RADIUS server must be specified for the unit when you
implement 802.1X, WPA-TLS, or WPA2-TLS security.
- Secret – A shared text string used to encrypt messages between the un it an d
the RADIUS server. Be sure that the same text string is specified on t he RADIUS
server. Do not use blank spaces in the string. (Maximum length: 20 characters)
7-6
Page 65
Wireless QoS
Wireless QoS
Wireless networks offer an equal opportunity for all devic es to transmit data from
any type of application. Although this is acceptable for most applications, multimedia
applications (with audi o and video) are particularly sensiti ve to the delay and
throughput variations that result from this equal opportunity wireless access method.
For multimedia applications to run well over a wireless network, a Quality of Service
(QoS) mechanism is r equired to prioritize traffic types an d pr ovide an enhanced
opportunity wireless access method.
The Pocket VoIP Gateway imp le ments QoS using the Wi-Fi Multimedia (WMM)
standard. Using WMM, the access point is able to priori tiz e tr affic and optimize
performance when mul t ipl e applications compete for wi re l ess network bandwidth at
the same time. WMM em pl oys techniques that are a su bset of the developing IEE E
802.11e QoS standard and it enables the access poin t to int er operate with both
WMM-enabled clients and other devices that may lack any WMM functionality.
7
Figure 7-9. QoS Settings
• Enable QoS – Check this box to en able WMM QoS on the unit.
7-7
Page 66
7
Wireless Settings
7-8
Page 67
Chapter 8: VoIP Settings
VoIP stands for Voice over Internet Protocol. By using VoIP technology you can
effectively use the internet to m ake phone calls. This is done by placing the voice
calls on the network by encrypting a voice call into data packets at one end and then
decrypting it back into voice calls at the other end. This encryption and decryption is
from a analog signal (yo ur voice) into a digital signal (data packets) and then back
into an analog signal.
The Pesonal Mobile Gatew ay uses Session Initiation Protocol (SIP) as the control
mechanism that sets up, initiates, and terminates calls between a caller and a called
party. The SIP messaging makes use of “Proxy,” “Redirect,” and “Registration”
servers to process cal l requests and find the location of call ed parties across the
Internet. When SIP has se t up a cal l bet w een two parties, the actual voice
communication is a dire ct peer-to-peer connecti on us i ng t he standard Real-Time
Protocol (RTP), which streams th e enc oded voice data across the netw ork.
You can make VoIP calls by using a regular ph one with the Pocket VoIP Gateway.
You can also make VoIP calls from your co m put er usi ng a VoIP application with a
simple microphone and computer speakers . Ho wever, using IP telephones or VoIP
boxes provides an expe rience identical to normal telephoning. Many manufa ct ur er s
are designing phones which are specially meant to work with this technology, called
a SIP phone.
The configuration of VoIP settings is available in all operating modes.
The VoIP configuration pages include the fol lo wi ng options.
To enter the SIP config uration page, click SIP Settings.
Figure 8-10. VoIP SIP Settings
• SIP Listen Port – The port on which the unit will listen and transmit voice-data
traffic, as specified by your VoIP provider. (Default: 5060)
• Proxy Server Address – Address of the VoIP service provider proxy server.
• Proxy Server Port – The TC P po rt num ber used by the VoIP service provider’s proxy server.(Default: 5060)
• Register Server Address – IP address of SIP registrar server. A registrar is a
server that accepts register requests and places the information it receives in those
requests into the location service for the domain it handles.
• Register Server Port – The TCP port number used by the VoIP service provider’s
register server. (Default: 5060)
• Register Server Expire Time – The time the unit waits for a response from the
registrar se r v er.
• SIP Domain – The address of the SIP domain. This can be in the form of an IP
address or a URL, as speci fie d by your VoIP provider.
• User Authentication Name – An alphanumeric string that uniq uely identifies the
user to the SIP server.
• User Authentication Password – An alphanumeric string that uniquely identifies
the SIP user’s permiss io n righ ts.
8-2
Page 69
VoIP Advanced Settings
VoIP Advanced Settings
To enter the advanced VoIP configuration page, cl ick Advanced Settings.
STUN (Simple Traversal of UDP throu gh N AT (Network Address Translation)) is a
protocol for assisting de vi ces behind a NAT firewall or router with their packet
routing.
8
Figure 8-11. VoIP Advanced Settings
• DTMF Relay Encode – Enables/disables the sending of dual-tone multi-frequency
(touch tone) phone sig nal s over the VoIP connection.
• Time for Packet Size Transmission – Specifies a maxim um amount of time for
transmission of a data packet. (Def ault: 10ms)
• Voice Coder Configuration:
- Available Decoder – Provides a list of available decoders.
- Selected Decoder – Displays selected decoders.
• NAT Traversal Setting:
- Type – Defines the NAT traversal setting. (Default: STUN)
- Server Domain – Specifies the domain of the STUN server.
- Server Port – Specifies the port used by the server.
- Enable – Enables the fe at ur e.
8-3
Page 70
8
VoIP Settings
8-4
Page 71
Chapter 9: Status Information
The Pocket VoIP Gateway includes st a tu s info rm at i on p a ges f or det a il s on the un it ’ s
current settings, event logs, and DHCP clients.
The status information desc ribed in this chapter applies to Ga t ew ay Mode and
Access Point Mode only.
Figure 9-1. System Status
The Status pages include th e f ollowing:
Table 9-1. Status Information
MenuDescriptionPage
System StatusDisplays WAN and LAN interface information and other system
System LogDisplays event log entries9-3
DHCP Client ListDisplays connected DHCP clients that have been assigned IP
details
addresses by the DHCP server
9-2
9-4
9-1
Page 72
Status Information
9
System Status
The system status page display s co nnectivity status information for the unit’s WAN
and LAN interfaces, firmware and hardware version numbers, and the number of
clients connected to your network.
Figure 9-2. Status
WAN – Displays WAN connectio n type and status:
• Cable/DSL – Displays connecti on s status.
• WAN IP – Displays the WAN IP address p ro vided by the ISP.
• Subnet Mask – Disp lays the WAN subnet mask.
• Gateway – Displays the WAN gateway address.
• DNS – Displays the WAN DNS address.
• Secondary DNS – Disp la ys t he secondary DNS address .
• Connection Type – Displays the connection type for the WAN.
• Release – Releases the curre nt IP ad dress information.
• Renew – Initiates a new DHCP cl ient re quest for an IP address.
LAN – Display system IP settings, as well as DHCP, NAT and firewall status:
• IP Address – Displays t he unit’s IP address.
• Subnet Mask – Dis pla y s th e subnet mask.
• DHCP Server – Displays the DHCP server status.
• Firewall – Displays the firewall status.
9-2
Page 73
System Log
Information – Displays the num ber of connected clients as w el l as th e unit’s
hardware and firmwar e ver si on numbers:
• Connected Clients – Displays the number of con nected clients, if any.
• Runtime Code Version – Displays the runtime code version.
• LAN MAC Address – Displays the LAN M A C ad dress.
• WAN MAC Address – Displays WAN MAC address.
• Hardware Version – Displays the hardware version number.
System Log
The Security Log page displays Pocket VoIP Gateway system events.
9
Figure 9-3. System Log
9-3
Page 74
Status Information
9
DHCP Client List
The DHCP Client List page all ow s you to see what devices ar e currently connected
to the unit and have been as si gned an IP address by the DH C P ser ver.
Figure 9-4. DHCP Client List
9-4
Page 75
Appendix A: Troubleshooting
Check the following item s before you contact local Technical Support.
1.If wireless clients cannot ac cess the network, check the fo llowing:
• Be sure the Pocket VoIP Gateway and the wireless clients are configured with
the same Service Set ID (SSID).
• If authentication or encryption are enabled, ensure that the wireless clients are
properly configured with the approp riate authen t ication or encryption keys.
• If authentication is being performed through a RADIUS server, ensure that the
clients are properly conf ig ur ed on the RADIUS server.
• If authentication is being per fo rmed through IEEE 802.1X, be su re the
wireless users have inst al le d an d properly configured 802.1 X cl i ent so ftw ar e.
• If MAC address filtering is enabled, be sure the client’s address is included in
the local filtering database (see “MAC Control” on page 3-13).
• If the wireless clients are roaming between Pocket VoIP Gateways in Access
Point mode, make sure that all the Pocket VoIP Gateways and wireless
devices in the Extended Service Set (ESS) are configured to the same SSID,
and authentication me th od.
2.If the Pocket VoIP Gateway cannot be con figured using a web browse r:
• Be sure to have configured the Pocket VoIP Gateway with a valid IP address,
subnet mask and defa ult g at ew ay.
• Check that you have a valid network connection to the Pocket VoIP Gateway
and that the Ethernet port or the wireless interface that you are using has not
been disabled.
• If you are connecting to th e Po cket VoIP Gateway through the LAN or W A N
port, check the network cabling between the management station and the unit.
If you are connecting to the Pocket VoIP Gateway from a w i re less client,
ensure that you have a va lid connection to the unit.
3.If you forgot or lost the passwor d:
• Set the Poc ket VoIP G ateway t o its defa ult conf igurat ion by pr essing t he reset
button on the back panel for 5 seconds or more. Then use the default user
name “admin” and a null p assword to access the man agement interface.
4.If all other recovery measure fail, and the Pocket VoIP Gateway is still not
functioning properly, take any of these steps:
• Reset the Pocket VoIP Gateway’s hardware using the web interface, or
through a power reset.
• Reset the Pocket VoIP Gateway to its default configur at i on by pressing the
A-1
Page 76
A
Troubleshooting
reset button on the side pan el fo r 5 se conds or more. Then use the de fa ul t
user name “admin” and a null password to access the management interface.
A-2
Page 77
Glossary
10BASE-T
IEEE 802.3 specification for 10 Mbps Ethernet over two pairs of Category 3 or better
UTP cable.
100BASE-TX
IEEE 802.3u specification for 10 0 M bps Fast Ethernet over two pairs of Categor y 5
or better UTP cable.
Access Point
An internetworking device that seamlessly connects wired and wireless networks.
Access points attached to a wired net w ork, support the creatio n of multiple radio
cells that enable roamin g th ro ughout a facility.
Ad Hoc
A group of computers con ne ct ed as an independent wireles s network, without an
access point.
Advanced Encryption Standard (AES)
An encryption algorithm that implements symmetric key cryptography. AES provides
very strong encryption using a completely different ciphering algorithm to TKI P and
WEP.
Authentication
The proces s to ver i fy th e i den ti t y of a cl i en t r equ es ti ng n et work a cce ss . I EEE 8 02. 11
specifies two forms of aut hentication: open system and shared key.
Backbone
The core infrastructure of a network. The portion of the ne tw or k th at transports
informati on f rom on e central loc at io n t o an ot he r c entral location where i t i s u nl oa ded
onto a local system.
Basic Service Set (BSS)
A set of 802.11-compliant stations and an access point th at operate as a
fully-connected wire le ss net w or k.
Beacon
A signal periodically trans m itted from the access point tha t is us ed t o i den tif y t he
service set, and to main tain contact with wireless clients.
Glossary-1
Page 78
Glossary
Broadcast Key
Broadcast keys are sent to stations using 802.1X dynamic keyi n g. Dy namic
broadcast key rotation is often used to allow the access point t o generate a random
group key and periodically update all key-management capable wireless clients.
CSMA/CA
Carrier Sense Multiple Access with Collision Avoidance.
Dynamic Host Configuration Protocol (DHCP)
Provides a framework for passing configuration information to hosts on a TCP/IP
network. DHCP is based on the Bootstrap Protocol (BOOTP), adding the capability
of automatic allocation o f re us abl e network addresses and additional configuration
options.
Encryption
Data passing between the acc ess point and clients can use encryption to protect
from interception and ev esdropping.
Extended Service Set (ESS)
More than one wire less cel l can be conf igur ed w ith t he s ame S erv ice S et I den tifi er to
allow mobile users can ro am between different cells with the Extended Service Set.
Extensible Authentication Protocol (EAP)
An authentication protocol used to authenticate network clients. EAP is combine d
with IEEE 802.1X port authentication and a RADIUS authentication server to provide
“mutual authentication” between a client, the access point, and the a RADIUS server
Ethernet
A popular local area data com m unications network, which accepts transmission
from comput ers and terminals.
File Transfer Protocol (FTP)
A TCP/IP protocol used for file transfer.
Hypertext Transfer Protocol (HTTP)
HTTP is a standard used to transmit and receive all data over the World W i de Web.
IEEE 802.11b
A wireless standard that supp or ts wireless communications in the 2.4 G Hz band
using Direct Sequence Spread Spectrum (DSSS). The standard provides for data
rates of 1, 2, 5.5, and 11 Mbps.
Glossary-2
Page 79
Glossary
IEEE 802.11g
A wireless standard that supp or ts wireless communications in the 2.4 G Hz band
using using Orthogonal Fr equency Division Multip lexi ng (OFDM). The standard
provides for data rates of 6, 9, 11, 12, 18, 24, 36, 48, 54 Mbps. IEEE 802.11g is also
backward compatible with IEEE 802.11b.
IEEE 802.1X
Port Authentication co nt ro ls access to the switch ports by requi r in g users to first
enter a user ID and password fo r au th enti cation.
Infrastructure
An integrated wireless and wired LAN is called an infrastructure configuration.
Inter Access Point Protocol (IAPP)
A protocol that specifies the w irel es s si gnaling required to ensur e th e successful
handover of wireless cli ents roaming between different 802 .11f-compliant acce ss
points.
Local Area Network (LAN)
A group of interconnected computer and support devices.
MAC Address
The physical layer address used to uniquely identi fy net w or k nodes.
Network Time Protocol (NTP)
NTP provides the mech an is m s to synchronize time across t he network. The time
servers operate in a hiera rc hi cal-master-slave conf i gur at ion in order to synchronize
local clocks within the subnet and to national time standards via wire or radio.
Open System
A security option which br oadcasts a beacon signal including the access point’s
configured SSID. Wirele ss cl ients can read the SSID from the beacon, and
automatically reset thei r S SI D to allo w i m m ediate connection to the nearest access
point.
Orthogonal Frequency Division Multiplexing (ODFM)
OFDM/ allows multiple users to transmit in an allocat ed band by dividing the
bandwidth into many narrow b andwidth carriers.
Power over Ethernet (PoE)
A specification for providing both power and data to low-pow e r network devices
using a single Category 5 Et her net cable. PoE provides great er flexibility in the
locating of access point ’s and net w or k devices, and significan tly decreased
installation costs.
Glossary-3
Page 80
Glossary
RADIUS
A logon authentication pro to col that uses software running on a central server to
control access to the ne tw ork.
Roaming
A wireless LAN mobile user mo ves around an ESS and maintains a con tinu ous
connection to the infrastructure network.
RTS Threshold
Transmitters contending for the medium may not be aware of ea ch other. RTS/CTS
mechanism can solve this “Hidden Node Problem.” If the packet size is smaller than
the preset RTS Threshold size, the RTS/CTS m ec hanism will NOT be enabled.
Service Set Identifier (SSID)
An identifier that is attached to packets sent over the wirel es s LA N and functions as
a password for joining a particular radio cell; i.e., Basic Service Set (BSS).
Session Key
Session keys are unique to each client, and are used to aut henticate a client
connection, and corre lat e tr affic passi ng between a specific client and the access
point.
Shared Key
A shared key can be used to authenticate each client attached to a wireless network.
Shared Key authentication must be used along with the 802.11 Wireless Equivalent
Privacy algorithm.
Simple Network Management Protocol (SNMP)
The application proto col in the Inte r net suite of pr otocols whic h offers net work
management servic es.
Simple Network Time Protocol (SNTP)
SNTP allows a device to se t its internal cl oc k based on periodic updates f ro m a
Network Time Protocol (NTP) server. Updates can be requested from a specific NTP
server, or can be received via broadcasts sen t by N TP servers.
Temporal Key Integrity Protocol (TKIP)
A data encryption method des ig ne d as a replacement for WEP. TKIP avoids the
problems of WEP static keys by dynamically changing data encryption keys.
Trivial File Transfer Protocol (TFTP)
A TCP/IP protocol common l y use d f or softw ar e downloads.
Glossary-4
Page 81
Glossary
Wi-Fi Protected Access
WPA employs 802.1X as its basic framework for user a ut hentication and dynamic
key management to pro vi de an enhanced security sol ut i on fo r 802.11 wireless
networks.
Wired Equivalent Privacy (WEP)
WEP is based on the use of sec ur ity k eys and the popular RC4 encrypti on
algorithm. Wireless dev ic es without a valid WEP key will be excl uded from network
traffic.
WPA Pre-shared Key (PSK)
PSK can be used for small office networks that may not have the resources to
configure and maintain a RADIUS server, WPA provides a simple operating mode
that uses just a pre-shar ed password for network acces s.
Glossary-5
Page 82
Glossary
Glossary-6
Page 83
Index
A
access point, setup wi zar d 2-9
active key 7-6
administrator settings 6-4
AP name 7-2
authentication
2-2, 2-9, 7-2, 7-4, 7-6
type
auto-reconnect 2-4
B
backup settings 4-6
beacon interval 7-3
C
channel ID 7-3
client filter, enable 3-12
configuration tools 6-6
D
DDNS server 3-5
default settings, rest or e 6-6
DHCP
client list
information 4-7
server 3-6, 4-5, 6-4
dial up xDSL 2-3, 3-3
discard ping 3-11
DMZ host 3-8
DNS 3-4
drop port scan 3-11
DTMF relay encode 8-3
dynamic IP, cable modem 2-3, 3-3
security, options 7-4
Selected AP SSID 2-6
service name 2-4
Simple Network Time Prot ocol See
SNTP
SIP domain 8-2
SIP listen port 8-2
site survey 2-6
SNTP 6-3
SSID Broadcast 2-2, 2-9
SSID, configuring 2-6
status information 4-7
subnet mask 2-3, 3-6
system inform ation 4-8, 9-3
system log 4-9, 9-3
system status 4-7, 9-2
system time 6-3
T
troubleshooting A-1
Tx preamble type 7-3
U
UPnP enable 6-7
user authentication name 2-5
user authentication password 2-5
user name 2-4
V
voice coder configurati on 8-3
VoIP 2-5
W
WAN information 4-8
WAN Settings 2-3
WAN Type 2-2
WEP, configuring 2-6, 4-3
Wired Equivalent Prote ct ion See WEP
wireless client, setup wizard
Wlan radio 7-2
2-6
Index-2
Page 85
Page 86
Model Number: VG007
Pub. Number: 150200025600E, E012006-R01
Loading...
+ hidden pages
You need points to download manuals.
1 point = 1 manual.
You can buy points or you can get point for every manual you upload.