No part of this document may be reproduced or transmitted in any form or by any
means without prior written consent of Huawei Technologies Co., Ltd.
The product described in this manual may include copyrighted software of Huawei
Technologies Co., Ltd and possible licensors. Customers shall not in any manner
reproduce, distribute, modify, decompile, disassemble, decrypt, extract, reverse
engineer, lease, assign, or sublicense the said software, unless such restrictions are
prohibited by applicable laws or such actions are approved by respective copyright
holders under licenses.
Trademarks and Permissions
, , and
Technologies Co., Ltd.
Other trademarks, product, service and company names mentioned are the property
of their respective owners.
are trademarks or registered trademarks of Huawei
Notice
Some features of the product and its accessories described herein rely on the
software installed, capacities and settings of local network, and may not be activated
or may be limited by local network operators or network service providers, thus the
descriptions herein may not exactly match the product or its accessories you
purchase.
Huawei Technologies Co., Ltd reserves the right to change or modify any information
or specifications contained in this manual without prior notice or obligation.
NO WARRANTY
THE CONTENTS OF THIS MANUAL ARE PROVIDED "AS IS". EXCEPT AS
REQUIRED BY APPLICABLE LAWS, NO WARRANTIES OF ANY KIND, EITHER
EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO, THE IMPLIED
WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
PURPOSE, ARE MADE IN RELATION TO THE ACCURACY, RELIABILITY OR
CONTENTS OF THIS MANUAL.
TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, IN NO CASE
SHALL HUAWEI TECHNOLOGIES CO., LTD BE LIABLE FOR ANY SPECIAL,
INCIDENTAL, INDIRECT, OR CONSEQUENTIAL DAMAGES, OR LOST PROFITS,
BUSINESS, REVENUE, DATA, GOODWILL OR ANTICIPATED SAVINGS.
Import and Export Regulations
Customers shall comply with all applicable export or import laws and regulations and
will obtain all necessary governmental permits and licenses in order to export,
re-export or import the product mentioned in this manual including the software and
technical data therein.
To use the device properly and safely, read these warnings and precautions carefully
and strictly observe them during operation. Unless otherwise specified, the device
described in this section includes the device and its accessories.
Basic Requirements
z During storage, transportation, and operation of the device, keep it dry and prevent
it from colliding with other objects.
z Do not dismantle the device. In case of any fault, contact an authorized service
center for assistance or repair.
z Without authorization, no organization or individual can change the mechanical,
safety, or performance design of the device.
z When using the device, observe all applicable laws and regulations and respect the
legal rights of other people.
Environmental Requirements for Using the Device
z Before connecting and disconnecting cables, stop using the device, and then
disconnect it from the power supply. Ensure that your hands are dry during
operation.
z Keep the device far from sources of heat and fire, such as a heater or a candle.
z Keep the device far from electronic appliances that generate strong magnetic or
electric fields, such as a microwave oven or a refrigerator.
z Place the device on a stable surface.
z Place the device in a cool and well-ventilated indoor area. Do not expose the device
to direct sunlight. Use the device in an area with a temperature ranging from 0°C to
40°C.
z Do not block the openings on the device with any object. Reserve a minimum space
of 10 cm around the device for heat dissipation.
z Do not place any object (such as a candle or a water container) on the device. If any
foreign object or liquid enters the device, stop using the device immediately, power
it off, remove all the cables connected to it, and then contact an authorized service
center.
z During thunderstorms, power off the device, and then remove all the cables
connected to it to prevent it from getting damaged due to lightning strikes.
Precautions for Using Wireless Devices
z When using the device, ensure that the antenna of the device is at least 20 cm away
from all persons.
z Do not use the device where using wireless devices is prohibited or may cause
zThe radio waves generated by the device may interfere with the operation of
electronic medical devices. If you are using any electrical medical device, contact
its manufacturer for the restrictions on the use of the device.
z Do not take the device into operating rooms, intensive care units (ICUs), or
coronary care units (CCUs).
Areas with Inflammables and Explosives
z Do not use the device where inflammables or explosives are stored, for example, in
a gas station, oil depot, or chemical plant. Otherwise, explosions or fires may occur.
In addition, follow the instructions indicated in text or symbols.
z Do not store or transport the device in the same box as inflammable liquids, gases,
or explosives.
Accessory Requirements
z Use only the accessories supplied or authorized by the device manufacturer.
Otherwise, the performance of the device may get affected, the warranty for the
device or the laws and regulations related to telecommunications terminals may
become null and void, or an injury may occur.
z Do not use the power adapter if its cable is damaged. Otherwise, electric shocks or
fires may occur.
z Ensure that the power adapter meets the specifications indicated on the device
nameplate.
z Ensure that the power adapter meets the requirements of Clause 2.5 in
IEC60950-1/EN60950-1 and it is tested and approved according to national or local
standards.
Safety of Children
Keep the device and its accessories out of the reach of children. Otherwise, they may
damage the device and its accessories by mistake, or they may swallow the small
components of the device, causing suffocation or other dangerous situations.
Maintenance
z If the device is not used for a long time, power it off, and then remove all the cables
connected to it.
z If any exception occurs, for example, if the device emits any smoke or unusual
sound or smell, stop using the device immediately, power it off, remove all the
cables connected to it, and then contact an authorized service center.
z Do not trample, pull, or overbend any cable. Otherwise, the cable may get damaged,
causing malfunction of the device.
z Before cleaning the device, stop using it, power it off, and then remove all the
cables connected to it.
z Use a clean, soft, and dry cloth to clean the device shell. Do not use any cleaning
This symbol on the device (and any included batteries) indicates that the device
(and any included batteries) should not be disposed of as normal household
garbage. Do not dispose of your device or batteries as unsorted municipal waste.
The device (and any batteries) should be handed over to a certified collection point
for recycling or proper disposal at the end of its life.
For more detailed information about the recycling of the device or batteries, contact
your local city office, the household waste disposal service, or the retail store where
you purchased this device.
The disposal of this device is subject to the Waste from Electrical and Electronic
Equipment (WEEE) Directive of the European Union. The purpose for separating
WEEE and batteries from other waste is to minimize any environmental impact and
health hazard due to the presence of hazardous substances.
Reduction of Hazardous Substances
This device is compliant with the EU Registration, Evaluation, Authorisation and
Restriction of Chemicals (REACH) Regulation (Regulation No 1907/2006/EC of the
European Parliament and of the Council) and the EU Restriction of Hazardous
Substances (RoHS) Directive (Directive 2002/95/EC of the European Parliament and of
the Council). For more information about the REACH compliance of the device, visit
the Web site www.huaweidevice.com/certification. You are recommended to visit the
Web site regularly for up-to-date information.
EU Regulatory Conformance
z This device should be installed and operated with a minimum distance of 20 cm
between the antenna and all persons.
z Български: С настоящето Huawei Technologies Co., Ltd. декларира, че този
уред съответства на основните изисквания и другите разпоредби на
Директива 1999/5/EC.
zČesky: Huawei Technologies Co., Ltd., tímto prohlašuje, že toto zařízení je ve
shodě se základními požadavky a dalšími souvisejícími opatřeními směrnice
1999/5/EC.
zDansk: Huawei Technologies Co., Ltd. erklærer hermed at denne enhed er i
overensstemmelse med de obligatoriske krav og andre relevante bestemmelser i
direktiv 1999/5/EF.
zNederlands: Hierbij verklaart Huawei Technologies Co., Ltd. dat dit apparaat in
overeenstemming is met de essentiële eisen en de andere relevante bepalingen van
richtlijn 1999/5/EC.
zEnglish: Hereby, Huawei Technologies Co., Ltd. declares that this device is in
compliance with the essential requirements and other relevant provisions of
Directive 1999/5/EC.
zEesti: Käesolevaga kinnitab Huawei Technologies Co., Ltd., et see seade vastab
Direktiivi 1999/5/EÜ põhinõudmistele ja teistele asjakohastele määrustele.
zEspañol (Europeo) : Con el presente documento, Huawei Technologies Co., Ltd.
declara que este dispositivo cumple con los requisitos esenciales y con las demás
disposiciones correspondientes de la Directiva 1999/5/CE.
zSvenska: Huawei Technologies Co., Ltd. förklarar härmed att denna produkt
överensstämmer med de grundläggande kraven och andra relevanta föreskrifter i
direktiv 1999/5/EG.
z For the declaration of conformity, visit the Web site
www.huaweidevice.com/certification.
z Notice: Observe the national local regulations in the location where the device is to
be used. This device may be restricted for use in some or all countries of European
Union.
GNU General Public License Notice
z This product contains code that is covered by the GNU General Public License
(GPL). In accordance with the GPL, if you would like a copy of the GPL source
code contained in this product shipped to you on CD, for a charge no more than the
cost of preparing and mailing a CD to you, please contact terminal@huawei.com.
z For further information on the GNU GPL Code, please visit the GNU Project home
The supported functions are subject to your product purchased. The online help is only
for reference.
1.1 Functions
The WiMAX Customer-Premises Equipment (CPE) (hereinafter referred to as the CPE)
is a next-generation gateway used in a Worldwide Interoperability for Microwave
Access (WiMAX) network. The CPE provides you a new service experience. With the
CPE, you can enjoy wireless broadband services. With the CPE, home and enterprise
users can easily set up a wireless network and enjoy the services over the network.
Wireless Broadband Services
z
Supporting wireless Internet access
z
Supporting seamless connections through which you can access the network anytime
and anywhere
z
Guaranteeing network security with reliability
VoIP Service (For the BM622, BM632 and the BM652)
z
Supporting the Voice over IP (VoIP) service based on the Session Initiation Protocol
(SIP)
z
Supporting the voice compression technology
z
Providing high-quality voice services
Enhanced Throughput
z
Supporting the downlink bandwidth of up to 15 Mbit/s and the uplink bandwidth of
up to 5 Mbit/s
z
Supporting multiple-input multiple-output (MIMO)
z
Supporting Orthogonal Frequency-Division Multiple Access (OFDMA), which
increases spectrum utilization
Various Services
z
Providing a Web-based utility with a user-friendly graphical user interface (GUI)
and abundant help information
z
Supporting both local and remote upgrade of the CPE
Issue 04 (2010-01-10) Huawei Proprietary and Confidential
Before configuring the network, log in to the Web-based utility. Take the Windows XP
operating system and the Internet Explorer 6.0 as examples.
To log in to the Web-based utility, do as follows:
Step 1
Step 2
Step 3
Step 4
Configure the IP address of the computer. Ensure that the IP address of the computer and
the IP address of the CPE are in the same network segment.
z By default, the IP address of the CPE is 192.168.1.1 and the subnet mask is 255.255.255.0.
z If the CPE is working as a routing device, it is recommended that the IP address and DNS
settings be obtained automatically.
Start the Internet Explorer, enter
.
Enter
Enter the user name and the password in the login window that is displayed, and then
click
After the user name and the password are verified, you can perform operations on the
.
Login
Both the initial user name and password are user.
http://192.168.1.1
in the address bar, and then press
Web-based utility.
----End
1.3 Configuring a WAN
When you configure a wider area network (WAN), the CPE can function as a routing or
bridging device. With the CPE, a terminal on the local area network (LAN) side is
connected to the network.
z
In routing mode, the CPE functions as a routing device to connect to the network.
Based on packet information, the CPE searches for a route through which th e packets
are sent to the destination IP address.
z
In bridging mode, the CPE functions as a bridging device to connect to the network.
The CPE only transparently transmits packets.
Three modes of obtaining an IP address are available for the CPE:
z
Dynamic Host Configuration Protocol (DHCP) mode: The IP address is obtained
from the Internet service provider (ISP).
z
Static IP address mode: The ISP configures a static IP address.
z
Point-to-Point Protocol over Ethernet (PPPoE) mode: The IP address is obtained
through PPPoE dialup.
1.3.1 Configuring the Routing Mode
Configuring the DHCP Routing Mode
Issue 04 (2010-01-10) Huawei Proprietary and Confidential
In the navigation tree, choose
Select
Select
Select a network address translation (NAT) type.
Click
Route
from
Mode
.
DHCP Auto get IP address from ISP
The NAT function is enabled to facilitate the translation of IP addresses. Through NAT, the
host IP address of a LAN can be effectively hidden. Thus, the security of the intranet is
ensured. Two NAT types are available:
z Network Address Port Translation (NAPT)
z Cone NAT
.
Apply
Basic
>
, and then click the
WAN
.
WAN
tab.
----End
Configuring the Static IP Routing Mode
Step 1
Step 2
Step 3
Step 4
Step 5
Step 6
Step 7
Step 8
Step 9
In the navigation tree, choose
Select
Select
Select a NAT type.
Enter the IP address in the
Enter the subnet mask in the
Enter the default gateway in the
Enter the IP address of the primary domain name server (DNS) in the
Server
Enter the IP address of the secondary DNS in the
Route
from
Mode
.
Static Get static IP address from ISP
The NAT function is enabled to facilitate the translation of IP addresses. Through NAT, the
host IP address of a LAN can be effectively hidden. Thus, the security of the intranet is
ensured. Two NAT types are available:
z Network Address Port Translation (NAPT)
z Cone NAT
IP Address
text box.
>
Basic
WAN
text box.
Subnet Mask
Default Gateway
, and then click the
.
text box.
text box.
Secondary DNS Server
WAN
tab.
Primary DNS
text box.
IP Address, Subnet Mask, Default Gateway, Primary DNS Server, Secondary DNS
Server are provided by the carrier.
Step 10
Click
Apply
.
----End
Configuring the PPPoE Routing Mode
Step 1
Step 2
Issue 04 (2010-01-10) Huawei Proprietary and Confidential
The NAT function is enabled to facilitate the translation of IP addresses. Through NAT, the
host IP address of a LAN can be effectively hidden. Thus, the security of the intranet is
ensured. Two NAT types are available:
z Network Address Port Translation (NAPT)
z Cone NAT
Enter the user name and password in the text box.
Select the dial method.
Two dial-up methods are available: Auto Dial and Manual Dial. If selecting Manual Dial,
you need to click Manual Dial set up a dial-up connection.
Click
Apply
.
.
----End
1.3.2 Configuring the Bridge Mode
The configuration of the bridging mode is similar to that of the routing mode.
Step 1
Step 2
Step 3
Step 4
Step 5
In the navigation tree, choose
Select
For the details on how to set parameters, see section1.3.1 "Configuring the Routing
Bridge
from
Mode
.
Basic
>
, and then click the
WAN
WAN
tab.
Mode".
Set whether to enable the virtual local area network (VLAN) function.
Click
Apply
.
----End
1.4 Configuring a LAN
To configur e a LAN, you need to set DHCP parameters. After DHCP is enabled, the CPE
allocates an IP address pool to the network device on the LAN side.
In the navigation tree, choose
Enter the IP address in the
Enter the subnet mask in the
Click
Select
Enter the start IP address on the LAN side in the
Enter the end IP address on the LAN side in the
Select the lease of the address from
.
Apply
Enable DHCP Server
IP Address
>
Basic
LAN
text box, for example, 192.168.1.1.
Subnet Mask
.
Lease (unit)
, and then click the
text box, for example, 255.255.255.0.
Start IP Address
End IP Address
.
The system automatically leases the address in advance according to the specified lease.
Issue 04 (2010-01-10) Huawei Proprietary and Confidential
If the CPE is working as a bridging device, you need to perform only Step 1 to Step 4 when
configuring a LAN.
----End
1.5 Configuring VoIP
The BM622, BM632 and the BM652 have the VoIP function.
As a voice service based on SIP, VoIP enables users to make Intern et phone calls and fax
data.
As an application layer protocol, SIP is used for setting up, changing, or completing a
multimedia session.
1.5.1 Configuring Basic VoIP Functions
Step 1
Step 2
Step 3
Step 4
Step 5
Step 6
Step 7
Step 8
Step 9
Step 10
Step 11
Step 12
In the navigation tree, choose
Enter a new ID in the
Enter the user name and password provided by the carrier respectively.
Enter the port number in the
Select the correct caller identification display type from
for example,
Set whether to enable message waiting in the S
Service
Display
area.
SIP ID
.
>
Basic
VoIP
text box.
SIP Local Port
, and then click the
text box.
elect Message Waiting Indication
When you enable the function, you need to enter the Uniform Resource Identifier (URI)
in the
Message Waiting Indication Service Subscribe URI
Click
Click the
Select the server type from
Two options are available:
Enter the server address and the port respectively.
Enter the domain name of the SIP service in the text box.
Click
to save the settings.
Apply
SIP Server
to save the settings.
Apply
tab.
Server
Primary server
.
and
SIP User
Caller Number Display Type
text box.
Secondary server
.
tab.
,
z Select the SIP ID to be changed, change it, and then click Apply.
z Select Remove to delete the selected SIP ID. After a SIP ID is removed, if you want to use
the SIP ID, you need to create it again.
z If the SIP server is the secondary server, you do not need to configure the parameters of the
proxy server.
----End
Issue 04 (2010-01-10) Huawei Proprietary and Confidential
In the navigation tree, choose Basic > VoIP, and then click the Speed Dial tab.
Parameter Used to Specify …
Dial Number Speed dial number.
Note Note of the speed dial.
Real Number Real phone number of the speed dial.
Modify the attributes of the selected speed dial number and then click Apply.
Select Remove to delete the selec ted s peed di al nu m ber. After it is removed, if you want
to speed dial the number, you need to designate the number to speed dial first.
1.6 Connecting to and Disconnecting from a Network
Connecting to a Network
To connect to a WiMAX network, do as follows:
Step 1
Step 2
In the navigation tree, choose
Click
Connect To Network
The CPE will connect to the network automatically.
----End
Status
.
>
WiMAX
, and then click the
WiMAX Status
tab.
Disconnecting from a Network
When you do not use the Internet, you can disconnect the CPE from the network
manually. After you disconnect the network connection, you need to connect the CPE to
the network again before accessing the Internet.
Step 1
Step 2
In the navigation tree, choose
Click
Disconnect From Network
----End
Status
>
.
WiMAX
, and then click the
WiMAX Status
1.7 Connecting the External Antenna (Optional)
Issue 04 (2010-01-10) Huawei Proprietary and Confidential
NAT is used to convert an IP address and a port so that the device on the LAN side uses
an IP address of the same public network to access the network on the WAN side.
2.1.1 Configuring the ALG
An application layer gateway (ALG) is used to convert the specified data carried in IP
packets, thus supporting LAN applications in the process of transmitting the packets on
the LAN side and the packets on the WAN side.
In the navigation tree, choose Advanced > NAT, and then click the ALG tab.
Parameter Used to Specify …
Enable L2TP ALGWhether to enable the L2TP ALG.
Enable IPSec ALGWhether to enable the IPSec ALG.
Enable H.323
ALG
Enable RTSP ALGWhether to enable the RTSP ALG.
Enable SIP ALG
Host Address IP address of the host.
Enable DMZ Whether to enable the DMZ.
2.1.3 Configuring Port Mapping
Port mapping supports the mapping between the interfaces on the WAN side and the
interfaces on the LAN side.
Adding a Port Mapping Rule
In the navigation tree, choose Advanced > NAT, and then click the Port Mapping tab.
Two port mapping modes are available:
z
Custom: indicates the self-defined mode.
z
Application: indicates the mode provided by the system.
When selecting Custom, you must set the following parameters.
Parameter Used to Specify …
Mapping Name Mapping name.
Protocol Interface protocol.
External Port External port number.
Internal Port Internal port number.
Internal Host IP address of the internal host.
Source IP AddressIP address of the source host.
When you select Application, the system displays the values of all parameters. Y ou can
keep the default values or change them.
Deleting a Port Mapping Rule
Select the name of the mapping to be deleted, and then click Remove.
2.1.4 Configuring a Port Trigger
During remote access, the specified port of the firewall on the router must be enabled for
certain applications. A port trigg er is used to set up a new connection between the r emote
applications on the WAN side and the applications that require the use of certain ports on
the LAN side.
Adding a Port Trigger
In the navigation tree, choose Advanced > NAT, and then click the Port Trigger tab.
Issue 04 (2010-01-10) Huawei Proprietary and Confidential
Application: indicates the mode provided by the system.
When selecting Custom, you must set the following parameters.
Parameter Used to Specify …
Trigger
Description
Trigger Protocol Protocol type.
Trigger Start Port Start port number.
Trigger End Port End port number.
Open Start Port Open start port number.
Open End Port Open end port number.
When you select Application, the system displays values of all parameters. You can
keep the default values or change them.
New rule name.
Deleting a Port Trigger
Select the trigger name to be deleted, and then click Remove.
2.2 Configuring the ACL
By using the access control list (ACL) function, you can enable o r disable th e H yp ertext
Transfer Protocol (HTTP), Telnet, and Secure Shell (SSH) services.
Step 1
Step 2
Step 3
In the navigation tree, choose
Enable or disable the ACL of a service.
Click
----End
Apply
.
2.3 Configuring SNTP
The Simple Network Time Protocol (SNTP) is used to synchronize network time.
Step 1
Step 2
Step 3
Issue 04 (2010-01-10) Huawei Proprietary and Confidential
In the navigation tree, choose
Select the
Select an option respectively from
and
Auto Synchronization Network Time Server
Time Zone
If Primary SNTP Server and Secondary SNTP Server drop-down list boxes do not contain
the required options, enter the server names in the text boxes.
The security function is used to control the rights of sending and receiving packets and
the duration for accessing the network.
Two options are available:
z
Black: indicates that a blacklist member does not have the corresponding rights.
z
White: indicates that a whitelist member has the corresponding rights
2.4.1 Configuring the URL Filter
The universal resource locator (URL) filter is used to prevent a network device at the
LAN side to access certain web sites at the WAN side.
Adding a URL Filter Rule
Step 1
Step 2
Step 3
Step 4
Step 5
Step 6
Modifying a URL Filter Rule
In the navigation tree, choose
Enable the URL filter.
Select
Click
Enter an address in
Click
----End
Select the URL filter rule to be modified, modify it, and then click Apply.
Black
New
Apply
or
White
.
URL
.
Advanced
.
.
>
Security
, and then click the
URL Filter
tab.
Deleting a URL Filter Rule
Select the URL filter rule to be deleted, and then click Remove.
2.4.2 Configuring the MAC Filter
The MAC filter can filter data frames according to the defined f ilter rule. The filter takes
effect only when all conditions of the filter rule are met.
Adding a MAC Filter Rule
Step 1
Step 2
Step 3
Step 4
Step 5
Issue 04 (2010-01-10) Huawei Proprietary and Confidential
In the navigation tree, choose
Enable the MAC filter.
Select
Click
Set the following parameters of the MAC filter rule.
Start Time Effective time of a rule, in the format of hh: mm.
End Time Expiration time of a rule, in the format of hh: mm.
Day Effective date of a rule.
Enable Whether to use this rule.
Click
----End
Apply
.
MAC address of the source host.
MAC address of the destination host.
Modifying a MAC Filter Rule
Select the MAC filter rule to be modified, modify it, and then click Apply.
Deleting a MAC Filter Rule
Select the MAC filter rule to be deleted, and then click Remove.
2.4.3 Configuring the IP Incoming Filter
When the firewall is enabled, the IP incoming filter can be used to receive certain
specified IP packets on the WAN side.
Adding an IP Incoming Filter Rule
Step 1
Step 2
Step 3
Step 4
Issue 04 (2010-01-10) Huawei Proprietary and Confidential
In the navigation tree, choose
tab.
Enable the IP incoming filter.
Click
Set the following parameters of the IP incoming filter rule.
Parameter Used to Specify …
Filter Name Name of an IP incoming filter rule.
Protocol Protocol type.
Enable Whether to use this rule.
Source Start
Address
Source Start Port Start port number of the source host.
Source End Port End port number of the source host.
Destination Start
Start IP address of the destination host.
Address
Destination End
End IP address of the destination host.
Address
Destination Start
Start port number of the destination host.
Port
Destination End
End port number of the destination host.
Port
Step 5
Click
Apply
.
----End
Modifying an IP Incoming Filter Rule
Select the IP incoming filter rule to be modified, modify it, and then click Apply.
Deleting an IP Incoming Filter Rule
Select the IP incoming filter rule to be deleted, and then click Remove.
2.4.4 Configuring the IP Outgoing Filter
The IP outgoing filter is used to prevent the LAN side from sending certain IP packets.
The configuration of an IP outgoi ng filter rul e is t he same as that of an IP incoming filter
rule. For details about the parameter settings, see section 2.4.3 "Configuring the IP
Incoming Filter"
2.4.5 Configuring the Firewall
The firewall is used to prevent the protect ed network from the unauthorized or unv erified
access from the Internet. Users of an intranet are allowed to access the Internet.
In the navigation tree, choose Advanced > Security, and then click the Firewall tab.
Select a security level of the firewall from Security Level.
The meanings of options are as follows:
z
Off: indicates that the firewall is disabled.
z
Low: indicates that the firewall functions as a state firewall. The firewall prevents
port scanning and IP address spoofing, but allows both ping operation and Internet
Control Message Protocol (ICMP) redirect packets on the WAN side.
Issue 04 (2010-01-10) Huawei Proprietary and Confidential
Medium: indicates that besides preventing port scanning and IP address spoofing,
the firewall prevents ICMP redirection packets.
z
High: indicates that besides preventing port scanning, IP address spoofing, and
ICMP redirection packets, the firewall prevents the Synchronous Idle (SYN)
character flood attack and the ping operation on the WAN side.
2.5 Configuring WiMAX Security Parameters
In the navigation tree, choose WiMAX > Security, and then click the Security tab.
The parameter description is as follows.
Parameter Used to Specify …
PKM
Authentication Authentication type. There are two authentication types:
Inner EAP
NAI Network Access Identifier. The default value is recommended.
User ID User ID provided by the ISP.
User Password User password provided by the ISP.
Note:
EAP = Extensible Authentication Protocol
NAI = Network Access Identifier
PKM = Privacy Key Management
TLS = Transport Layer Security
TTLS = Tunneled Transport Layer Security
After setting the parameters, click Apply to save the settings.
Whether authentication is required for network access. There are
two authentication modes:
z
NO PKM
z
PKMv2_EAP
z
TLS: indicates device authentication.
z
TTLS: indicates user authentication.
Inner Extensible Authentication Protocol. The default value is
recommended.
Issue 04 (2010-01-10) Huawei Proprietary and Confidential
A user account is used to allow a user to set network parameters. After you log in to the
CPE, you can change the user name and the password, and you need to remember the
new account.
If you forget the account, you can restore factory settings of the CPE to validate the
initial account or contact the local carrier.
To change a user account, do as follows:
Step 1
Step 2
Step 3
Step 4
3.2 Restarting the CPE
Step 1
Step 2
In the navigation tree, choose
Enter the old password.
Enter a new user name and a new password, and then confirm the new password.
Click
----End
Apply
.
Maintain
>
Account
In the navigation tree, choose
Click
----End
to restart the CPE.
Reboot
Maintain
>
Device
3.3 Upgrading the Software
, and then click the
, and then click the
Account
Reset
tab.
tab.
To any damage to the CPE, do not power off the CPE when it is being upgraded.
The software of the CPE can be upgraded locally or remotely. It takes about a few
minutes to upgrade the software. Upgrade the software according to the on-screen
instructions.
Upgrading the CPE Locally
Issue 04 (2010-01-10) Huawei Proprietary and Confidential
To upgrade the software of the CPE, you need to upload the local upgrade files to the
CPE. To upgrade the CPE locally, do as follows:
Step 1
Step 2
Step 3
In the navigation tree, choose
Click
Click
----End
Contact the carrier for how to get the upgrade files.
, and select an upgrade file.
Browse
Upgrade Software
Maintain
.
>
Device
, and then click
Firmware
.
Upgrading the CPE Remotely
You can upgrade the CPE through a remote server. The remote upgrade of the CPE
requires the corresponding user rights and the support from the carrier.
To upgrade the CPE remotely, do as follows:
Step 1
Step 2
Step 3
Step 4
In the navigation tree, choose
Enter the network address or the IP address of the remote server in
Enter the user name and the password.
Click
Remote Upgrade Software
----End
Maintain
>
.
, and then click the
Device
Firmware
Remote URL
tab.
.
Upgrading the CPE by CWMP
You can upgrade the CPE by CPE WAN Management Protocol (CWMP). Perform the
following steps to upgrade the CPE:
Step 1
Step 2
In the navigation tree, choose
Click
Upgrade Software By CWMP
----End
Maintain
.
>
, and then click the
Device
Firmware
tab.
3.4 Restoring Default Settings
After default settings are restored, the configuration file is restored to the default one.
Therefore, restore the default settings with caution.
Step 1
Step 2
Issue 04 (2010-01-10) Huawei Proprietary and Confidential
In the navigation tree, choose
Click
Restore Default Configuration
You need to log in to the Web-based utility after restoration.
The BM622, BM632 and the BM652 have the VoIP function.
The VoIP information includes th e SIP ID, register status of the SIP ID, and port number.
To check the VoIP information, choose Status > VoIP in the navigation tree, and then
click the VoIP Info tab.
4.1.5 Checking the WiMAX Information
The WiMAX information includes the network access status of the WiMAX network,
upload and download rates, signal strength, link quality, and the information about the
base station, bandwidth, and frequency.
To check the WiMAX information, choose Status > WiMAX in the navigation tree, and
then click the tabs.
4.2 Detecting the CPE
The local network connection and the network connection of the ISP can be tested.
To detect the CPE, do as follows:
Step 1
Step 2
Step 3
In the navigation tree, choose
Enter the IP address to be detected.
Click
----End
Start
Maintain
>
Diagnose
, and then click the
Diagnose
tab.
Issue 04 (2010-01-10) Huawei Proprietary and Confidential
Check the power supply, ensuring that the power supply is properly connected.
z
Check whether the power adapter meets the specification.
The WiMAX indicator is not on.
z
Check the power supply, ensuring that the power supply is properly connected.
z
Check whether you have activated the WiMAX online service.
z
Place the device in an open space without any obstacle around it, such as a cement
wall or a wooden wall, which affects reception of WiMAX network signals.
z
Place the device far away from an electrical device that produces a strong magnetic
field or a strong electric field, such as a microwave oven, a fridge, or a satellite dish
antenna.
You cannot make a VoIP call.
z
Ensure that the phone line is properly connected.
z
Check whether the VoIP parameters are properly set, see section 1.5 "Configuring
VoIP".
The WiMAX network cannot be found.
z
Ensure that the antenna is properly connected.
z
Check the power supply, ensuring that the power supply is properly connected.
z
Place the device in an open space without any obstacle around it, such as a cement
wall or a wooden wall, which affects reception of WiMAX network signals.
z
Place the device far away from an electrical device that produces a strong magnetic
field or a strong electric field, such as a microwave oven, a fridge, or a satellite dish
antenna.
The device or the power adapter overheats.
z
The device may get heated after being used for a long time. Therefore, power off the
device when you do not use the device.
z
Place the device in a well-ventilated place and do not expose the device to direct
sunlight.
Issue 04 (2010-01-10) Huawei Proprietary and Confidential
Check the power supply, ensuring that the power supply is properly connected.
z
Check whether the network cable between the device and the computer is properly
connected. Ensure that the device is properly connected to the computer.
z
Check whether the parameters of the Web-based utility are properly set. For details,
see section 1.2 "Logging In to the Web-Based Utility"
z
Check the Internet Explorer parameters, ensuring that the proxy server is disabled.
Take the Internet Explorer 6.0 as an example. Disable the proxy server as follows:
1. Start the Internet Explorer 6.0.
2. Choose Tools > Internet Options…, and then click the Connections
tab.
3. Click LAN Settings....
4. Clear the Use a proxy server for your LAN check box. Then click OK.
5. Log in to the Web-based utility.
Issue 04 (2010-01-10) Huawei Proprietary and Confidential
ACL
ALG
CWMP
DHCP
DMZ
DNS
EAP
FE
HTTP
ICMP
IPSec
ISP
L2TP
LAN
MAC
MIMO
NAI
NAPT
NAT
OFDMA
PKM
PPPoE
PPTP
RTSP
SIP
SNTP
SSH
SYN
Access Control List
Application Layer Gateway
CPE WAN Management Protocol
Dynamic Host Configuration Protocol
Demilitarized Zone
Domain Name Server
Extensible Authentication Protocol
Fast Ethernet
Hypertext Transfer Protocol
Internet Control Message Protocol
IP Security Protocol
Internet Service Provider
Layer 2 Tunneling Protocol
Local Area Network
Medium Access Control
Multiple-Input Multiple-Output
Network Access Identifier
Network Address Port Translation
Network Address Transmission
Orthogonal Frequency Division Multiple Access
Privacy Key Management
Point-to-Point Protocol over Ethernet
Point-to-Point Tunneling Protocol
Real-Time Streaming Protocol
Session Initiation Protocol
Simple Network Time Protocol
Secure Shell
Synchronous
Issue 04 (2010-01-10) Huawei Proprietary and Confidential
transport layer security protocol
tunneled transport layer security protocol
Uniform Resource Identifier
Universal Resource Locator
Voice over IP
Wide Area Network
Wired Equivalent Privacy
Worldwide Interoperability for Microwave Access
Issue 04 (2010-01-10) Huawei Proprietary and Confidential