IMPORTANT!
READ CAREFULLY BEFORE USE.
KEEP THIS GUIDE FOR FUTURE REFERENCE.
Screenshots and graphics in this book may differ slightly from your product due to differences in
your product firmware or your computer operating system. Every effort has been made to ensure
that the information in this manual is accurate.
Related Documentation
•Quick Start Guide
The Quick Start Guide shows how to connect the LTE3301 and access the Web Configurator
wizards. It contains information on setting up your network and configuring for Internet access.
WAN ........................................................................................................................................................49
Wireless LAN .......................................................................................................................................... 61
LAN .........................................................................................................................................................81
DHCP Server ..........................................................................................................................................83
Interface Group .....................................................................................................................................102
2.4 Status Screen ....................................................................................................................................21
5.6 WLAN Station Status .....................................................................................................................45
5.7 LTE Modem Status ............................................................................................................................46
Chapter 6
WAN .....................................................................................................................................................49
LAN ......................................................................................................................................................81
8.2 What You Can Do .............................................................................................................................81
8.3 What You Need To Know ..................................................................................................................81
8.4 LAN IP Screen .................................................................................................................................. 82
Chapter 9
DHCP Server .......................................................................................................................................83
11.2 General ..........................................................................................................................................97
21.6 Getting More Troubleshooting Help ..............................................................................................138
Appendix A Pop-up Windows, JavaScript and Java Permissions ................................................... 139
Appendix B Setting Up Your Computer’s IP Address ......................................................................148
Appendix C Common Services........................................................................................................174
LTE3301 Series User’s Guide
8
Table of Contents
Appendix D Legal Information .........................................................................................................177
Appendix E Customer Support ........................................................................................................184
Index ..................................................................................................................................................190
LTE3301 Series User’s Guide
9
PART I
User’s Guide
10
1.1 Overview
This chapter introduces the main features and applications of the LTE3301.
The LTE3301 is a wireless router, which can connect to a mobile network and the Internet through a
wireless WAN connection and provide easy network access to mobile users without additional
wiring. You can set up a wireless network with other IEEE 802.11b/g/n compatible devices.
CHAPTER 1
Introduction
A range of services such as a firewall and content filtering are also available for secure Internet
computing.
1.2 Applications
Your can have the following networks with the LTE3301:
• Wired. You can connect network devices via the Ethernet ports of the LTE3301 so that they can
communicate with each other and access the Internet.
• Wireless LAN. Wireless clients can connect to the LTE3301 to access network resources. You
can use WPS (Wi-Fi Protected Setup) to create an instant network connection with another WPScompatible device.
• Wireless WAN. Insert a 4G SIM card into the SIM card slot to connect to a mobile network for
Internet access.
LTE3301 Series User’s Guide
11
Chapter 1 Introduction
1.3 Ways to Manage the LTE3301
Use any of the following methods to manage the LTE3301.
• WPS (Wi-Fi Protected Setup). You can use the WPS button or the WPS section of the Web
Configurator to set up a wireless network with your LTE3301.
• Web Configurator. This is recommended for everyday management of the LTE3301 using a
(supported) web browser.
1.4 Good Habits for Managing the LTE3301
Do the following things regularly to make the LTE3301 more secure and to manage the LTE3301
more effectively.
• Change the password. Use a password that’s not easy to guess and that consists of different
types of characters, such as numbers and letters.
• Write down the password and put it in a safe place.
• Back up the configuration (and make sure you know how to restore it). See Section 20.7 on page
131. Restoring an earlier working configuration may be useful if the device becomes unstable or
even crashes. If you forget your password, you will have to reset the LTE3301 to its factory
default settings. If you backed up an earlier configuration file, you would not have to totally reconfigure the LTE3301. You could simply restore your last configuration.
1.5 Resetting the LTE3301
If you forget your password or IP address, or you cannot access the Web Configurator, you will need
to use the RESET button at the back of the LTE3301 to reload the factory-default configuration file.
This means that you will lose all configurations that you had previously saved, the password will be
reset to “1234” (see Section 20.4 on page 127) and the IP address will be reset to “192.168.1.1”.
1.5.1 How to Use the RESET Button
1Make sure the power LED is on.
2Press the RESET button for one to four seconds to restart/reboot the LTE3301.
3Press the RESET button for longer than ten seconds to set the LTE3301 back to its factory-default
configurations.
1.6 The WPS Button
Your LTE3301 supports Wi-Fi Protected Setup (WPS), which is an easy way to set up a secure
wireless network. WPS is an industry standard specification, defined by the Wi-Fi Alliance.
LTE3301 Series User’s Guide
12
Chapter 1 Introduction
Power
LAN
Internet
WLAN/WPS
LTE
LTE Signal
Strength
WPS allows you to quickly set up a wireless network with strong security, without having to
configure security settings manually. Each WPS connection works between two devices. Both
devices must support WPS (check each device’s documentation to make sure).
Depending on the devices you have, you can either press a button (on the device itself, or in its
configuration utility) or enter a PIN (a unique Personal Identification Number that allows one device
to authenticate the other) in each of the two devices. When WPS is activated on a device, it has two
minutes to find another device that also has WPS activated. Then, the two devices connect and set
up a secure network by themselves.
You can use the WPS button () on the top panel of the LTE3301 to activate WPS in order to
quickly set up a wireless network with strong security.
1Make sure the power LED is on (not blinking).
2Press the WPSbutton for more than three seconds and release it. Press the WPS button on another
WPS-enabled device within range of the LTE3301.
Note: You must activate WPS in the LTE3301 and in another wireless device within two
minutes of each other.
For more information on using WPS, see Section 4.2 on page 30.
1.7 SIM Card Slot
The LTE3301 comes with a built-in 4G LTE module for 4G connections. To set up a 4G connection
using the built-in 4G LTE module, just insert a 4G SIM card into the SIM card slot at the back of the
LTE3301.
Note: You must insert the 4G SIM card into the card slot before turning on the LTE3301.
1.8 LEDs
Figure 1 Front Panel
LTE3301 Series User’s Guide
13
Chapter 1 Introduction
The following table describes the LEDs.
Table 1 Front panel LEDs
LEDCOLORSTATUSDESCRIPTION
PowerGreenOnThe LTE3301 is receiving power and functioning properly.
BlinkingThe LTE3301 is in the process of starting up or default restoring.
OffThe LTE3301 is not receiving power.
InternetGreenOnThe LTE3301’s WAN connection is ready.
BlinkingThe LTE3301 is sending/receiving data through the WAN.
OffThe WAN connection is not ready, or has failed.
LTEGreenOnThe LTE3301 is registered and successfully connected to a 4G
Blinking
(slow)
Blinking
(fast)
OffThere is no SIM card inserted, the SIM card is invalid, the PIN
LTE Signal
Strength
GreenOnA valid SIM card is inserted and the wireless WAN interface is
network.
The LTE3301 is registered and successfully connected to a 2G/
3G network.
The LTE3301 Series is looking for an available 4G/3G/2G
network.
code is not correct or there is no service.
enabled.
OrangeOnSignal strength: Fair
RedOnSignal strength: Poor
WLAN/WPSGreenOnThe LTE3301 is ready and the 2.4GHz wireless LAN is on, but is
OffThe wireless LAN is not ready or has failed or WPS is disabled.
LANGreenOnThe LTE3301’s LAN connection is ready.
OffThe LAN connection is not ready, or has failed.
1.9 W all Mounting
Signal strength: Excellent
RSRP (Reference Signal Receiving Power) >= -79 dBm
-81 dBm >= RSRP >= -95 dBm
-97 dBm > RSRP
BlinkingThere is no LTE signal because there is no valid SIM card
Blinking
(slow)
Blinking
(fast)
inserted and/or the wireless WAN interface is disabled.
not sending/receiving data through the wireless LAN.
The LTE3301 is sending/receiving data through the wireless
LAN.
The LTE3301 is negotiating a WPS connection with a wireless
client.
You may need screw anchors if mounting on a concrete or brick wall.
Table 2 Wall Mounting Information
Distance between holes11 cm
LTE3301 Series User’s Guide
14
Chapter 1 Introduction
Table 2 Wall Mounting Information
M4 ScrewsTwo
Screw anchors (optional)Two
1Select a position free of obstructions on a wall strong enough to hold the weight of the device.
2Mark two holes on the wall at the appropriate distance apart for the screws.
Be careful to avoid damaging pipes or cables located inside the wall
when drilling holes for the screws.
3If using screw anchors, drill two holes for the screw anchors into the wall. Push the anchors into the
full depth of the holes, then insert the screws into the anchors. Do not insert the screws all the way
in - leave a small gap of about 0.5 cm.
If not using screw anchors, use a screwdriver to insert the screws into the wall. Do not insert the
screws all the way in - leave a gap of about 0.5 cm.
4Make sure the screws are fastened well enough to hold the weight of the LTE3301 with the
connection cables.
5Align the holes on the back of the LTE3301 with the screws on the wall. Hang the LTE3301 on the
screws.
Figure 2 Wall Mounting Example
LTE3301 Series User’s Guide
15
2.1 Overview
This chapter describes how to access the LTE3301 Web Configurator and provides an overview of its
screens.
The Web Configurator is an HTML-based management interface that allows easy setup and
management of the LTE3301 via Internet browser. Use Internet Explorer 9.0 and later versions,
Mozilla Firefox 21 and later versions, Safari 6.0 and later versions or Google Chrome 26.0 and later
versions. The recommended screen resolution is 1024 by 768 pixels.
In order to use the Web Configurator you need to allow:
• Web browser pop-up windows from your device. Web pop-up blocking is enabled by default in
Windows XP SP (Service Pack) 2.
• JavaScript (enabled by default).
• Java permissions (enabled by default).
CHAPTER 2
Introducing the Web Configurator
Refer to the Troubleshooting chapter (Chapter 21 on page 134) to see how to make sure these
functions are allowed in Internet Explorer.
2.2 Accessing the Web Configurator
1Make sure your LTE3301 hardware is properly connected and prepare your computer or computer
network to connect to the LTE3301 (refer to the Quick Start Guide).
2Launch your web browser.
3Type "http://192.168.1.1" as the website address.
Your computer must be in the same subnet in order to access this website address.
2.2.1 Login Screen
The Web Configurator initially displays the following login screen.
LTE3301 Series User’s Guide
16
Figure 3 Login screen
Chapter 2 Introducing the Web Configurator
The following table describes the labels in this screen.
Table 3 Login screen
LABELDESCRIPTION
UserType "admin" (default) as the user name.
PasswordType "1234" (default) as the password. Click Login.
2.2.2 Password Screen
You should see a screen asking you to change your password (highly recommended) as shown
next.
Figure 4 Change Password Screen
LTE3301 Series User’s Guide
17
Chapter 2 Introducing the Web Configurator
A
C
B
The following table describes the labels in this screen.
Table 4 Change Password Screen
LABELDESCRIPTION
New PasswordType a new password.
Retype to ConfirmRetype the password for confirmation.
ApplyClick Apply to save your changes back to the LTE3301.
IgnoreClick Ignore if you do not want to change the password this time.
Note: The management session automatically times out when the time period set in the
Administrator Inactivity Timer field expires (default five minutes; go to Chapter
20 on page 126 to change this). Simply log back into the LTE3301 if this happens.
2.3 The Main Screen
The Web Configurator’s main screen is divided into these parts:
Figure 5 The Web Configurator’s Main Screen
LTE3301 Series User’s Guide
18
• A - Title Bar
• B - Navigation Panel
• C - Main Window
2.3.1 Title Bar
The title bar provides some useful links that always appear over the screens below, regardless of
how deep into the Web Configurator you navigate.
Figure 6 Title Bar
The icons provide the following functions.
Table 5 Title Bar: Web Configurator Icons
LABELDESCRIPTION
Wizard Click this icon to open the setup wizard for the LTE3301.
About Click this icon to open a screen where you can click a link to visit the ZyXEL web site to see
Logout Click this icon to log out of the Web Configurator.
Chapter 2 Introducing the Web Configurator
detailed product information.
2.3.2 Navigation Panel
Use the sub-menus on the navigation panel to configure LTE3301 features.
Figure 7 Navigation Panel
LTE3301 Series User’s Guide
19
Chapter 2 Introducing the Web Configurator
The following table describes the sub-menus.
Table 6 Navigation Panel
LINKTABFUNCTION
StatusThis screen shows the LTE3301’s general device, system and interface
Monitor
LogUse this screen to view the list of activities recorded by your LTE3301.
DHCP TableUse this screen to view current DHCP client information.
Packet StatisticsUse this screen to view port status and packet specific statistics.
WLAN Station
Status
LTE Modem
Status
Configuration
Network
WANManagement
WAN
Network
Scan
IPv6Use this screen to configure the LTE3301’s IPv6 settings.
Wireless LAN GeneralUse this screen to enable the wireless LAN and configure wireless LAN and
More APUse this screen to configure multiple BSSs on the LTE3301.
MAC FilterUse the MAC filter screen to allow or deny wireless stations based on their
AdvancedThis screen allows you to configure advanced wireless LAN settings.
QoSUse this screen to configure Wi-Fi Multimedia Quality of Service (WMM
WPSUse this screen to configure the WPS settings.
WPS StationUse this screen to add a wireless station using WPS.
SchedulingUse this screen to schedule the times the Wireless LAN is enabled.
WDSUse this screen to enable and configure the WDS settings.
LANIPUse this screen to configure LAN IP address and subnet mask.
DHCP ServerGeneralUse this screen to enable the LTE3301’s DHCP server.
AdvancedUse this screen to assign IP addresses to specific individual computers
Client ListUse this screen to view information related to your DHCP status.
NATGeneralUse this screen to enable NAT.
Port
Forwarding
Port TriggerUse this screen to change your LTE3301’s port triggering settings.
ALGUse this screen to enable or disable SIP (VoIP) ALG (Application Layer
status information. Use this screen to access the summary statistics tables.
Use this screen to view the wireless stations that are currently associated
to the LTE3301’s 2.4GHz wireless LAN.
Use this screen to view the detailed information about the LTE module,
cellular interface, and SIM card. You can also view the LTE connection
status.
This screen allows you to configure ISP parameters, WAN IP address
assignment, and DNS servers.
Use this screen to specify the type of the mobile network to which the
LTE3301 is connected and how you want the LTE3301 to connect to an
available mobile network.
wireless security settings.
MAC addresses from connecting to the LTE3301.
QoS). WMM QoS allows you to prioritize wireless traffic according to the
delivery requirements of individual services.
based on their MAC addresses and to have DNS servers assigned by the
DHCP server.
Use this screen to configureservers behind the LTE3301 and forward
incoming service requests to the server(s) on your local network.
Gateway) in the LTE3301.
LTE3301 Series User’s Guide
20
Chapter 2 Introducing the Web Configurator
Table 6 Navigation Panel (continued)
LINKTABFUNCTION
Dynamic
DNS
RoutingStatic RouteUse this screen to configure IP static routes.
Interface
Group
Security
FirewallGeneralUse this screen to activate/deactivate the firewall.
Content
Filter
IPv6 firewallServicesUse this screen to configure IPv6 firewall rules.
Management
Bandwidth
Management
UPnPUPnPUse this screen to enable UPnP on the LTE3301.
TR069TR069Use this screen to configure your LTE3301 to be managed by an ACS.
Maintenance
GeneralGeneralUse this screen to view and change administrative settings such as system
AccountUser AccountUse this screen to change the user name and password of your LTE3301.
TimeTime SettingUse this screen to change your LTE3301’s time and date.
Firmware
Upgrade
Backup/
Restore
RestartSystem
Dynamic DNS Use this screen to set up dynamic DNS.
Dynamic
Routing
Interface
Group
ServicesThis screen shows a summary of the firewall rules, and allows you to edit/
Content Filter Use this screen to restrict web features and designate a trusted computer.
GeneralUse this screen to enable bandwidth management.
AdvancedUse this screen to set the upstream bandwidth and edit a bandwidth
Firmware
Upgrade
Backup/
Restore
Restart
Use this screen to enable and configure RIP on the LTE3301.
Use this screen to create a new interface group.
add a firewall rule.
You can also block certain web sites containing certain keywords in the
URL.
management rule.
and domain names.
Use this screen to upload firmware to your LTE3301.
Use this screen to backup and restore the configuration or reset the factory
defaults to your LTE3301.
This screen allows you to reboot the LTE3301 without turning the power
off.
2.4 Status Screen
Click to open the status screen.
LTE3301 Series User’s Guide
21
Figure 8 Status Screen
Chapter 2 Introducing the Web Configurator
The following table describes the icons shown in the Status screen.
Table 7 Status Screen Icon Key
ICONDESCRIPTION
Select a number of seconds or None from the drop-down list box to refresh all screen statistics
automatically at the end of every time interval or to not refresh the screen statistics.
Click this button to refresh the status screen statistics.
Click this icon to see the Status page. The information in this screen depends on the device
mode you select.
Click this icon to see the Monitor navigation menu.
Click this icon to see the Configuration navigation menu.
Click this icon to see the Maintenance navigation menu.
LTE3301 Series User’s Guide
22
Chapter 2 Introducing the Web Configurator
The following table describes the labels shown in the Status screen.
Table 8 Status Screen
LABELDESCRIPTION
Device Information
Host NameThis is the System Name you enter in the Maintenance > General screen. It is for
Model NumberThis is the model name of your device.
Firmware VersionThis is the firmware version and the date created.
WAN Information
MAC AddressThis shows the WAN Ethernet adapter MAC Address of your device.
IP AddressThis shows the WAN port’s IP address.
IP Subnet MaskThis shows the WAN port’s subnet mask.
Default GatewayThis shows the WAN port’s gateway IP address.
IPv6 AddressThis shows the IPv6 address of the LTE3301 on the WAN.
Operation BandThis shows the network type and the frequency band used by the mobile network to which
LAN Information
MAC AddressThis shows the LAN Ethernet adapter MAC Address of your device.
IP AddressThis shows the LAN port’s IP address.
IP Subnet MaskThis shows the LAN port’s subnet mask.
DHCPThis shows the LAN port’s DHCP role - Server or Disable.
IPv6 AddressThis shows the IPv6 address of the LTE3301 on the LAN.
WLAN Information
WLAN OP ModeThis is the device mode to which the LTE3301’s wireless LAN is set - Access Point Mode.
MAC AddressThis shows the 2.4GHz wireless adapter MAC Address of your device.
SSIDThis shows a descriptive name used to identify the LTE3301 in the 2.4GHz wireless LAN.
ChannelThis shows the channel number which you select manually.
SystemThis shows the wireless standards the LTE3301 supports.
SecurityThis shows the level of wireless security the LTE3301 is using.
FirewallThis shows whether the firewall is enabled or not.
Summary
Packet StatisticsClick Details... to go to the Monitor > Packet Statistics screen (Section 5.5 on page 44).
WLAN Station StatusClick Details... to go to the Monitor > WLAN Station Status screen (Section 5.6 on page
LTE Modem StatusClick Details... to go to the Monitor > LTE Modem Status screen (Section 5.6 on page
System Status
ItemThis column shows the type of data the LTE3301 is recording.
DataThis column shows the actual data recorded by the LTE3301.
System Up TimeThis is the total time the LTE3301 has been on.
Current Date/TimeThis field displays your LTE3301’s presentdate and time.
System Resource
identification purposes.
the LTE3301 is connecting.
Use this screen to view port status and packet specific statistics.
45). Use this screen to view the wireless stations that are currently associated to the
LTE3301’s 2.4GHz wireless LAN.
45). Use this screen to view the detailed information about the LTE module, cellular
interface, and SIM card. You can also view the LTE connection status.
LTE3301 Series User’s Guide
23
Chapter 2 Introducing the Web Configurator
Table 8 Status Screen (continued)
LABELDESCRIPTION
- CPU UsageThis displays what percentage of the LTE3301’s processing ability is currently used. When
this percentage is close to 100%, the LTE3301 is running at full load, and the throughput is
not going to improve anymore. If you want some applications to have more throughput, you
should turn off other applications (for example, using bandwidth management.)
- Memory UsageThis shows what percentage of the heap memory the LTE3301 is using.
Interface Status
InterfaceThis displays the LTE3301 port types. The port types are: WAN, LAN and WLAN.
StatusFor the LAN and WAN ports, this field displays Down (line is down) or Up (line is up or
connected).
For the 2.4GHz WLAN, it displays Up when the 2.4GHz WLAN is enabled or Down when the
2.4G WLAN is disabled.
RateFor the LAN ports, this displays the port speed or is left blank when the line is disconnected.
For the WAN port, it always displays the maximum transmission rate.
For the 2.4GHz WLAN, it displays the maximum transmission rate when the WLAN is enabled
and is left blank when the WLAN is disabled.
LTE3301 Series User’s Guide
24
3.1 Overview
This chapter provides information on the wizard setup screens in the Web Configurator.
The Web Configurator’s wizard helps you configure your device to access the Internet and change
the wireless LAN settings. Refer to your ISP for your Internet account information. Leave a field
blank if you don’t have that information.
3.2 Accessing the Wizard
1Launch your web browser and type "http://192.168.1.1" as the website address. Type "admin"
(default) as the user name, "1234" (default) as the password and click Login.
CHAPTER 3
Setup Wizard
2Click the Wizard icon in the top right corner of the web configurator to open the Wizard screen.
Figure 9 Title Bar: Wizard icon
3.3 Wizard Setup
1The first wizard screen displays showing the main steps in the wizard setup. Click Next to proceed
with the time zone setup screen.
LTE3301 Series User’s Guide
25
Chapter 3 Setup Wizard
Figure 10 Wizard: Start
2The LTE3301 automatically detects your location and displays the correct time zone. If the result is
not correct, click Detect Again or manually select the time zone of LTE3301’s location and click
Next.
Figure 11 Wizard: Time
3Enter your APN (Access Point Name) provided by your service provider. Select the country where
the LTE3301 is located and your service provider name. Click Next.
LTE3301 Series User’s Guide
26
Chapter 3 Setup Wizard
Figure 12 Wizard: WAN
4Use this screen to enable or disable the LTE3301’s wireless LAN, and enter the wireless network
name (SSID). Select a channel or use Auto to have the LTE3301 automatically determine a channel
to use. Click Next.
Figure 13 Wizard: Wireless Settings
5Select WPA2-PSK and enter a pre-shared key from 8 to 63 case-sensitive characters for data
encryption. The wireless clients which want to associate with this wireless network must have the
same wireless security settings. Otherwise, select No Security to allow any client to associate with
this network without any data encryption or authentication. Click Next.
LTE3301 Series User’s Guide
27
Chapter 3 Setup Wizard
Figure 14 Wizard: Wireless Security
6Use the read-only summary table to check whether what you have configured is correct. Click
Apply Settings to save your settings. Otherwise, click Back to go back to the previous screens.
Figure 15 Wizard: Summary
7The system takes about 35 seconds to apply settings.
LTE3301 Series User’s Guide
28
Chapter 3 Setup Wizard
Figure 16 Wizard: Apply Settings
8Click Finish to complete the wizard setup.
Figure 17 Wizard: Finish
You are now ready to connect wirelessly to your LTE3301 and access the Internet.
LTE3301 Series User’s Guide
29
CHAPTER 4
4.1 Overview
This chapter provides tutorials for setting up your LTE3301.
• Set Up a Wireless Network Using WPS
• Connect to LTE3301 Wireless Network without WPS
• Using Multiple SSIDs on the LTE3301
4.2 Set Up a Wireless Network Using WPS
This section gives you an example of how to set up wireless network using WPS. This example uses
the LTE3301 as the AP and NWD210N as the wireless client which connects to a notebook.
Tutorials
Note: The wireless client must be a WPS-aware device (for example, a WPS USB adapter
or PCI card).
There are two WPS methods for creating a secure connection via the web configurator or utility.
This tutorial shows you how to do both.
• Push Button Configuration (PBC) - create a secure wireless network simply by pressing a
button. See Section 4.2.1 on page 30. This is the easier method.
• PIN Configuration - create a secure wireless network simply by entering a wireless client's PIN
(Personal Identification Number) in the LTE3301’s interface. See Section 4.2.2 on page 31. This is
the more secure method, since one device can authenticate the other.
4.2.1 Push Button Configuration (PBC)
1Make sure that your LTE3301 is turned on. Make sure the WIFI button (at the back panel of the
LTE3301) is pushed in, and that the device is placed within range of your notebook.
2Make sure that you have installed the wireless client (this example uses the NWD210N) driver and
utility in your notebook.
3In the wireless client utility, find the WPS settings. Enable WPS and press the WPS button (Start or
WPS button)
4Log into LTE3301’s Web Configurator and press the Push Button in the Configuration >
Network > Wireless LAN 2.4G > WPS Station screen.
LTE3301 Series User’s Guide
30
Chapter 4 Tutorials
Wireless Client
Access Point
SECURITY INFO
COMMUNICATION
WITHIN 2 MINUTES
Note: Your LTE3301 has a WPS button located on its panel, as well as a WPS button in its
configuration utility. Both buttons have exactly the same function; you can use one
or the other.
Note: It doesn’t matter which button is pressed first. You must press the second button
within two minutes of pressing the first one.
The LTE3301 sends the proper configuration settings to the wireless client. This may take up to two
minutes. Then the wireless client is able to communicate with the LTE3301 securely.
The following figure shows you an example to set up wireless network and security by pressing a
button on both LTE3301 and wireless client (the NWD210N in this example).
Figure 18 Example WPS Process: PBC Method
4.2.2 PIN Configuration
When you use the PIN configuration method, you need to use both LTE3301’s configuration
interface and the client’s utilities.
1Launch your wireless client’s configuration utility. Go to the WPS settings and select the PIN method
to get a PIN number.
2Enter the PIN number to the PIN field in the Configuration > Network > Wireless LAN > WPS
Station screen on the LTE3301.
LTE3301 Series User’s Guide
31
Chapter 4 Tutorials
WITHIN 2 MINUTES
Wireless Client
Access Point
3Click Start buttons (or button next to the PIN field) on both the wireless client utility screen and the
LTE3301’s WPS Station screen within two minutes.
The LTE3301 authenticates the wireless client and sends the proper configuration settings to the
wireless client. This may take up to two minutes. Then the wireless client is able to communicate
with the LTE3301 securely.
The following figure shows you the example to set up wireless network and security on LTE3301
and wireless client (ex. NWD210N in this example) by using PIN method.
Figure 19 Example WPS Process: PIN Method
4.3 Connect to LTE3301 Wireless Network without WPS
This example shows you how to configure wireless security settings with the following parameters
on your LTE3301 and connect your computer to the LTE3301 wireless network.
SSIDSSID_Example3
Channel6
Security WPA2-PSK
(Pre-Shared Key: ThisismyWPA-PSKpre-sharedkey)
Follow the steps below to configure the wireless settings on your LTE3301.
LTE3301 Series User’s Guide
32
Chapter 4 Tutorials
The instructions require that your hardware is connected (see the Quick Start Guide) and you are
logged into the Web Configurator through your LAN connection (see Section 2.2 on page 16).
1Make sure the WIFI switch (at the back panel of the LTE3301) is set to ON.
2Open the Configuration >Network > Wireless LAN > General screen in the AP’s Web
Configurator.
3Confirm that the wireless LAN is enabled on the LTE3301.
4Enter SSID_Example3 as the SSID and select Channel-06 as the channel. Set security mode to
WPA2-PSK and enter ThisismyWPA-PSKpre-sharedkey in the Pre-Shared Key field. Click
Apply.
LTE3301 Series User’s Guide
33
Chapter 4 Tutorials
5Open the Status screen. Verify your wireless and wireless security settings under Device
Information and check if the WLAN connection is up under Interface Status.
4.3.1 Configure Your Notebook
Note: In this example, we use the ZyXEL NWD6505 wireless adapter as the wireless
client and use the Windows built-in utility (Windows Zero Configuration (WZC)) to
connect to the wireless network.
1The LTE3301 supports IEEE 802.11b, IEEE 802.11g, and IEEE 802.11n wireless clients. Make sure
that your notebook or computer’s wireless adapter supports one of these standards.
2Wireless adapters come with software sometimes called a “utility” that you install on your
computer. See your wireless adapter’s User’s Guide for information on how to do that.
LTE3301 Series User’s Guide
34
Chapter 4 Tutorials
3After you’ve installed the driver and attached the NWD6505 to your computer’s USB port, right-
click the Wireless Network Connection icon in your computer’s system tray, select and click
View Available Wireless Networks.
4The Wireless Network Connection screen displays. Click Refresh network list to view the
available wireless APs within range.
5Select SSID_Example3 and click Connect.
6Type the security key in the following screen. Click Connect.
LTE3301 Series User’s Guide
35
Chapter 4 Tutorials
7Check the status of your wireless connection in the screen below.
8If the wireless client keeps trying to connect to or acquiring an IP address from the LTE3301, make
sure you entered the correct security key.
If the connection has limited or no connectivity, make sure the DHCP server is enabled on the
LTE3301.
If your connection is successful, open your Internet browser and enter http://www.zyxel.com or the
URL of any other web site in the address bar. If you are able to access the web site, your wireless
connection is successfully configured.
4.4 Using Multiple SSIDs on the LTE3301
You can configure more than one SSID on a LTE3301. See Section 7.4 on page 71.
This allows you to configure multiple independent wireless networks on the LTE3301 as if there
were multiple APs (virtual APs). Each virtual AP has its own SSID, and wireless security type. That
is, each SSID on the LTE3301 represents a different access point/wireless network to wireless
clients in the network.
Clients can associate only with the SSIDs for which they have the correct security settings. Clients
using different SSIDs can access the Internet and the wired network behind the LTE3301 (such as a
printer).
LTE3301 Series User’s Guide
36
Chapter 4 Tutorials
A
B
C
SSID_Guest
SSID_Worker
SSID_VoIP
For example, you may set up three wireless networks (A, B and C) in your office. A is for workers,
B is for guests and C is specific to a VoIP device in the meeting room.
4.4.1 Configuring Security Settings of Multiple SSIDs
The LTE3301 is in router mode by default.
This example shows you how to configure the SSIDs with the following parameters on your
LTE3301 .
1Connect your computer to the LAN port of the LTE3301 using an Ethernet cable.
2The default IP address of the LTE3301is “192.168.1.1”. In this case, your computer must have an IP
address in the range between “192.168.1.2” and “192.168.1.254”.
3Click Start > Run on your computer in Windows. Type “cmd” in the dialog box. Enter “ipconfig” to
show your computer’s IP address. If your computer’s IP address is not in the correct range then see
Appendix B on page 148 for information on changing your computer’s IP address.
4After you’ve set your computer’s IP address, open a web browser such as Internet Explorer and
type “http://192.168.1.1” as the web address in your web browser.
5Enter “admin” as the user name and “1234” (default) as the password and click Login.
DoNotStealMyWirelessNetwork
6Type a new password and retype it to confirm, then click Apply. Otherwise, click Ignore.
LTE3301 Series User’s Guide
37
Chapter 4 Tutorials
7Go to Configuration > Network > Wireless LAN > More AP. Click the Edit icon of the first
entry to configure wireless and security settings for SSID_Worker.
8Configure the screen as follows. In this example, you enable Intra-BSS Traffic for SSID_Worker
to allow wireless clients in the same wireless network to communicate with each other. Click Apply.
9Click the Edit icon of the second entry to configure wireless and security settings for SSID_VoIP.
10 Configure the screen as follows. You do not enable Intra-BSS Traffic for SSID_VoIP. Click Apply.
LTE3301 Series User’s Guide
38
Chapter 4 Tutorials
11 Click the Edit icon of the third entry to configure wireless and security settings for SSID_Guest.
12 Configure the screen as follows. In this example, you enable Intra-BSS Traffic for SSID_Guest to
allow wireless clients in the same wireless network to communicate with each other. Click Apply.
LTE3301 Series User’s Guide
39
Chapter 4 Tutorials
LTE3301 Series User’s Guide
40
PART II
Technical Reference
41
5.1 Overview
This chapter discusses read-only information related to the device state of the LTE3301.
To access the Monitor screens, click after login.
You can also click the links in the Summary table of the Status screen to view the packets sent/
received as well as the status of wireless clients connected to the LTE3301.
CHAPTER 5
Monitor
5.2 What You Can Do
•Use the Log screen to see the logs for the activity on the LTE3301 (Section 5.3 on page 42).
•Use the DHCP Table screen to view information related to your DHCP status (Section 5.4 on
page 44).
•use the Packet Statistics screen to view port status, packet specific statistics, the "system up
time" and so on (Section 5.5 on page 44).
•Use the WLAN Station Status screen to view the wireless stations that are currently associated
to the LTE3301 (Section 5.6 on page 45).
•Use the LTE Modem Status screen to view the detailed information about the LTE module,
cellular interface, and SIM card. You can also check the LTE connection status (Section 5.7 on
page 46).
5.3 The Log Screen
The Web Configurator allows you to look at all of the LTE3301’s logs in one location.
LTE3301 Series User’s Guide
42
5.3.1 View Log
Use the View Log screen to see the logged messages for the LTE3301. The log wraps around and
deletes the old entries after it fills. Select what logs you want to see in the Log Setting screen.
Click Refresh to renew the log screen. Click Clear Log to delete all the logs.
Figure 20 View Log
Chapter 5 Monitor
You can configure which logs to display in the View Log screen. Go to the Log Setting screen and
select the logs you wish to display. Click Apply to save your settings. Click Cancel to start the
screen afresh.
Figure 21 Log Settings
LTE3301 Series User’s Guide
43
5.4 DHCP Table
DHCP (Dynamic Host Configuration Protocol, RFC 2131 and RFC 2132) allows individual clients to
obtain TCP/IP configuration at start-up from a server. You can configure the LTE3301’s LAN as a
DHCP server or disable it. When configured as a server, the LTE3301 provides the TCP/IP
configuration for the clients. If DHCP service is disabled, you must have another DHCP server on
that network, or else the computer must be manually configured.
Click Monitor > DHCP Table or Configuration > Network > DHCP Server > Client List. Readonly information here relates to your DHCP status. The DHCP table shows current DHCP client
information (including MAC Address, and IP Address) of all network clients using the LTE3301’s
DHCP server.
Figure 22 Monitor > DHCP Table
Chapter 5 Monitor
The following table describes the labels in this screen.
Table 9 Monitor > DHCP Table
LABEL DESCRIPTION
# This is the index number of the host computer.
StatusThis field displays whether the connection to the host computer is up (a yellow bulb) or
down (a gray bulb).
Host NameThis field displays the computer host name.
IP AddressThis field displays the IP address relative to the # field listed above.
MAC AddressThis field shows the MAC address of the computer with the name in the Host Name field.
Every Ethernet device has a unique MAC (Media Access Control) address which uniquely
identifies a device. The MAC address is assigned at the factory and consists of six pairs of
hexadecimal characters, for example, 00:A0:C5:00:00:02.
ReserveSelect this if you want to reserve the IP address for this specific MAC address.
ApplyClick Apply to save your changes back to the LTE3301.
CancelClick Cancel to reload the previous configuration for this screen.
5.5 Packet Statistics
Click Monitor > Packet Statistics or the Packet Statistics (Details...) hyperlink in the Status
screen. Read-only information here includes port status, packet specific statistics and the "system
up time". The Poll Interval(s) field is configurable and is used for refreshing the screen.
LTE3301 Series User’s Guide
44
Chapter 5 Monitor
Figure 23 Monitor > Packet Statistics
The following table describes the labels in this screen.
Table 10 Monitor > Packet Statistics
LABELDESCRIPTION
PortThis is the LTE3301’s interface type.
Status For the LAN ports, this displays the port speed and duplex setting or Down when the
line is disconnected.
For the WAN port, it displays Up when the mobile data connection is up, Connecting
when the LTE3301 is trying to bring the mobile data connection up, and displays Down
when the 3G/4G connection is down or not activated.
For the WLAN, it displays the maximum transmission rate when the WLAN is enabled
and Down when the WLAN is disabled.
TxPkts This is the number of transmitted packets on this port.
RxPkts This is the number of received packets on this port.
Collisions This is the number of collisions on this port.
Tx B/s This displays the transmission speed in bytes per second on this port.
Rx B/sThis displays the reception speed in bytes per second on this port.
Up TimeThis is the total time the LTE3301 has been for each session.
System Up TimeThis is the total time the LTE3301 has been on.
Poll Interval(s)Enter the time interval in seconds for refreshing statistics in this field.
Set IntervalClick this button to apply the new poll interval you entered in the Poll Interval(s)
field.
StopClick Stop to stop refreshing statistics.
5.6 WLAN Station Status
Click Monitor > WLAN Station Status or the WLAN Station Status (Details...) hyperlink in the
Status screen. View the wireless stations that are currently associated to the LTE3301’s 2.4GHz
wireless network in the Association List. Association means that a wireless client (for example,
your network or computer with a wireless network card) has connected successfully to the AP (or
wireless router) using the same SSID, channel and security settings.
LTE3301 Series User’s Guide
45
Chapter 5 Monitor
Figure 24 Monitor > WLAN Station Status
The following table describes the labels in this screen.
Table 11 Monitor > WLAN Station Status
LABELDESCRIPTION
# This is the index number of an associated wireless station.
MAC Address This field displays the MAC address of an associated wireless station.
Association TimeThis field displays the time a wireless station first associated with the LTE3301’s WLAN.
5.7 LTE Modem Status
Click Monitor > LTE Modem Status or the LTE Modem Status (Details...) hyperlink in the
Status screen. Use this screen to view the detailed information about the LTE module, cellular
interface, and SIM card. You can also check the LTE connection status.
Figure 25 Monitor > LTE Modem Status
The following table describes the labels in this screen.
Table 12 Monitor > LTE Modem Status
LABELDESCRIPTION
Modem Information
Physical InterfaceThis displays the interface used for the mobile data connection.
LTE3301 Series User’s Guide
46
Chapter 5 Monitor
Table 12 Monitor > LTE Modem Status (continued)
LABELDESCRIPTION
Module NameThis displays the name of the built-in LTE module.
IMEI/MEIDThis displays the International Mobile Equipment Number (IMEI) or Mobile Equipment
Identifier (MEID), which is the serial number of the built-in LTE module. It is a unique
15-digit number used to identify a mobile device.
HW VersionThis displays the hardware version of the built-in LTE module.
FW VersionThis displays the firmware version of the built-in LTE module.
SIM Status
SIMThis displays the status of the inserted SIM card. N/A displays if there is no SIM card
PIN Code StatusThis displays the status of PIN code authentication.
PIN Code Remaining
Times
PUK Code
Remaining Times
Service Information
OperatorThis displays the name of the service provider.
Cell BroadcastThis displays whether the one-to-many messaging service is available.
MCCThis displays the Mobile Country Code (MCC), which is used to identify the country of a
MNCThis displays the Mobile Network Code (MNC), which is used in combination with MCC
LACThis displays the 2-octet Location Area Code (LAC), which is used to identify a location
TACThis displays the Tracking Area Code (TAC), which is to identify a tracking area within a
Physical Cell IDThis displays the ID of a cell at the physical layer.
Service TypeThis displays the type of the mobile network to which the LTE3301 is connecting.
Operation BandThis displays the network type and the frequency band used by the mobile network to
RSSIThis displays the received signal strength indicator (RSSI), that is, the received signal
CS Register StatusThis displays the Circuit Switched network registration status.
EcIoThis displays the ratio (in dB) of the received energy per chip and the interference level.
PS Register StatusThis displays the packet switched network registration status.
PS Attached StatusThis displays the Packet switched Domain Attachment status.
Roaming StatusThis displays whether the LTE3301 is connected to another service provider’s mobile
IMSIThis displays the International Mobile Subscriber Identity (IMSI) stored in the SIM
SMSCThis displays the number for Short Message Service Center (SMSC), which stores,
MSISDNThis displays the MSISDN (Mobile Subscriber ISDN) number, a phone number assigned
inserted.
This displays how many times you can enter the PIN code.
This displays how many times you can enter the PUK code.
mobile subscriber.
to identify the public land mobile network (PLMN) of a mobile subscriber.
area within a PLMN.
PLMN.
which the LTE3301 is connecting.
strength in dBm.
network using roaming.
(Subscriber Identity Module) card. The SIM card is installed in a mobile device and used
for authenticating a customer to the carrier network. IMSI is a unique 15-digit number
used to identify a user on a network.
forwards and delivers SMS text message.
to a mobile subscriber to call a mobile device.
LTE3301 Series User’s Guide
47
Chapter 5 Monitor
Table 12 Monitor > LTE Modem Status (continued)
LABELDESCRIPTION
RSRPThis displays the Reference Signal Receive Power (RSRP), which is the average received
power of all Resource Elements (RE) that carry cell-specific Reference Signals (RS)
within the specified bandwidth.
RSRQThis displays the Reference Signal Received Quality (RSRQ), which is the ratio of RSRP
SINRThis displays the Signal to Interference plus Noise Ratio (SINR). A negative value
PLMNThis displays the Public Land Mobile Network (PLMN) code of the mobile network.
MIMOThis displays the MIMO (Multi-input Multi-output) technology supported by the
Support Band ListThis displays the frequency bands that are supported by the LTE3301.
to the E-UTRA carrier RSSI and indicates the quality of the received reference signal.
means more noise than signal.
LTE3301, such as 1T2R (1 Transmit and 2 Receive paths/antennas) or TM1-TM4
(Transmission Mode 4).
LTE3301 Series User’s Guide
48
6.1 Overview
LAN
This chapter discusses the LTE3301’s WAN screens. Use these screens to configure your LTE3301
for Internet access.
A WAN (Wide Area Network) connection is an outside connection to another network or the
Internet. It connects your private networks such as a LAN (Local Area Network) and other
networks, so that a computer in one location can communicate with computers in other locations.
3G and 4G standards for the sending and receiving of voice, video, and data in a mobile
environment. You can insert a 4G SIM card and set the LTE3301 to use this 3G/4G connection as
your WAN.
Figure 26 LAN/Wireless LAN and Wireless WAN
CHAPTER 6
WAN
6.2 What You Can Do
•Use the Management WAN screen to configure 3G/4G WAN connection settings (Section 6.4 on
page 52).
•Use the Network Scan screen to specify the type of the mobile network to which the LTE3301 is
connected and how you want the LTE3301 to connect to an available mobile network (Section 6.5
on page 56).
•Use the IPv6 screen to configure the LTE3301’s IPv6 settings (Section 6.6 on page 58).
LTE3301 Series User’s Guide
49
Chapter 6 WAN
6.3 What You Need To Know
The information in this section can help you configure the screens for your WAN connection, as well
as enable/disable some advanced features of your LTE3301.
3G
3G (Third Generation) is a digital, packet-switched wireless technology. Bandwidth usage is
optimized as multiple users share the same channel and bandwidth is only allocated to users when
they send data. It allows fast transfer of voice and non-voice data and provides broadband Internet
access to mobile devices.
4G
4G is the fourth generation of the mobile telecommunications technology and a successor of 3G.
Both the WiMAX and Long Term Evolution (LTE) standards are the 4G candidate systems. 4G only
supports all-IP-based packet-switched telephony services and is required to offer gigabit speed
access.
DNS Server Address Assignment
Use Domain Name System (DNS) to map a domain name to its corresponding IP address and vice
versa, for instance, the IP address of www.zyxel.com is 204.217.0.2. The DNS server is extremely
important because without it, you must know the IP address of a computer before you can access
it.
The LTE3301 can get the DNS server addresses in the following ways.
1The ISP tells you the DNS server addresses, usually in the form of an information sheet, when you
sign up. If your ISP gives you DNS server addresses, manually enter them in the DNS server fields.
2If your ISP dynamically assigns the DNS server IP addresses (along with the LTE3301’s WAN IP
address), set the DNS server fields to get the DNS server address from the ISP.
LTE3301 Series User’s Guide
50
Chapter 6 WAN
Multicast
Traditionally, IP packets are transmitted in one of either two ways - Unicast (1 sender - 1 recipient)
or Broadcast (1 sender - everybody on the network). Multicast delivers IP packets to a group of
hosts on the network - not everybody and not just 1.
Figure 27 Multicast Example
In the multicast example above, systems A and D comprise one multicast group. In multicasting,
the server only needs to send one data stream and this is delivered to systems A and D.
IGMP (Internet Group Multicast Protocol) is a network-layer protocol used to establish membership
in a multicast group - it is not used to carry user data. The LTE3301 supports both IGMP version 1
(IGMP v1), IGMP version 2 (IGMP v2) and IGMP version 3 (IGMP v3).
At start up, the LTE3301 queries all directly connected networks to gather group membership. After
that, the LTE3301 periodically updates this information. IP multicasting can be enabled/disabled on
the LTE3301 WAN interface in the Web Configurator.
IPv6 Introduction
IPv6 (Internet Protocol version 6), is designed to enhance IP address size and features. The
increase in IPv6 address size to 128 bits (from the 32-bit IPv4 address) allows up to 3.4 x 10
addresses. The LTE3301 can use IPv4/IPv6 dual stack to connect to IPv4 and IPv6 networks, and
supports IPv6 rapid deployment (6RD).
38
IP
IPv6 Addressing
The 128-bit IPv6 address is written as eight 16-bit hexadecimal blocks separated by colons (:). This
is an example IPv6 address 2001:0db8:1a2b:0015:0000:0000:1a2f:0000.
IPv6 addresses can be abbreviated in two ways:
• Leading zeros in a block can be omitted. So 2001:0db8:1a2b:0015:0000:0000:1a2f:0000 can
be written as 2001:db8:1a2b:15:0:0:1a2f:0.
• Any number of consecutive blocks of zeros can be replaced by a double colon. A double colon can
only appear once in an IPv6 address. So 2001:0db8:0000:0000:1a2f:0000:0000:0015 can be
written as 2001:0db8::1a2f:0000:0000:0015, 2001:0db8:0000:0000:1a2f::0015, 2001:db8::1a2f:0:0:15 or 2001:db8:0:0:1a2f::15.
LTE3301 Series User’s Guide
51
Chapter 6 WAN
ISP (IPv4)
IPv6 Internet
IPv4
IPv6
BR
IPv6 in IPv4
IPv4 Internet
IPv4
+
LAN
- IPv6
- IPv4
WAN
- IPv4
- IPv6 in IPv4
IPv6 Prefix and Prefix Length
Similar to an IPv4 subnet mask, IPv6 uses an address prefix to represent the network address. An
IPv6 prefix length specifies how many most significant bits (start from the left) in the address
compose the network address. The prefix length is written as “/x” where x is a number. For
example,
2001:db8:1a2b:15::1a2f:0/32
means that the first 32 bits (2001:db8) is the subnet prefix.
IPv6 Subnet Masking
Both an IPv6 address and IPv6 subnet mask compose of 128-bit binary digits, which are divided
into eight 16-bit blocks and written in hexadecimal notation. Hexadecimal uses four bits for each
character (1 ~ 10, A ~ F). Each block’s 16 bits are then represented by four hexadecimal
characters. For example, FFFF:FFFF:FFFF:FFFF:FC00:0000:0000:0000.
IPv6 Rapid Deployment
Use IPv6 Rapid Deployment (6rd) when the local network uses IPv6 and the ISP has an IPv4
network. When the LTE3301 has an IPv4 WAN address, you can enable 6rd to encapsulate IPv6
packets in IPv4 packets to cross the ISP’s IPv4 network.
The LTE3301 generates a global IPv6 prefix from its IPv4 WAN address and tunnels IPv6 traffic to
the ISP’s Border Relay router (BR in the figure) to connect to the native IPv6 Internet. The local
network can also use IPv4 services. The LTE3301 uses it’s configured IPv4 WAN IP to route IPv4
traffic to the IPv4 Internet.
Figure 28 IPv6 Rapid Deployment
6.4 Management WAN
The summary table shows you the WAN connection configured on the LTE3301. Click Network >
WAN > Management WAN from the Configuration menu.
LTE3301 Series User’s Guide
52
Figure 29 Network > WAN > Management WAN
The following table describes the labels in this screen.
Table 13 Network > WAN > Management WAN
LABELDESCRIPTION
InterfaceThis field displays the name of the WAN interface for this connection.
TypeThis field displays the type of the WAN connection.
IP AddressThis field displays the IPv4 and IPv6 addresses of the WAN connection.
StatusThis field indicates whether the IPv4 and IPv6 connectivity is available.
ModifyClick the Edit icon to configure the WAN connection settings.
6.4.1 Management WAN Edit
Chapter 6 WAN
Use this screen to change your LTE3301’s 3G/4G WAN connection settings. Click the Edit icon in the
Network > WAN > Management WAN screen.
LTE3301 Series User’s Guide
53
Chapter 6 WAN
Figure 30 Network > WAN > Management WAN Edit
The following table describes the labels in this screen.
Table 14 Network > WAN > Management WAN Edit
LABELDESCRIPTION
ISP Parameters for Internet Access
Encapsulation This shows the WAN connection type.
3G/4G Information
Dial-Up ProfileSelect Auto-Detection to have the LTE3301 use the inserted SIM card’s default
settings to connect to any available mobile network.
Select Manual and enter the information provided by your service provider to
connect to the service provider’s mobile network.
LTE3301 Series User’s Guide
54
Chapter 6 WAN
Table 14 Network > WAN > Management WAN Edit (continued)
LABELDESCRIPTION
CountrySelect the country in which you use the LTE3301.
Service ProviderSelect the name of your service provider. The options vary depending on the country
you selected.
If your service provider is not in the list, select Others.
APNConnections with different APNs (Access Point Names) may provide different services
(such as Internet access or MMS (Multi-Media Messaging Service)) and charge
method.
The corresponding APN automatically displays when you select a pre-defined service
provider.
If you select Others in the Service Provider field, manually enter the APN provided
by your service provider. You can enter up to 32 ASCII printable characters. Spaces
are allowed.
PIN CodeA PIN (Personal Identification Number) code is a key to a SIM card. Without the PIN
code, you cannot use the SIM card.
If your service provider enabled PIN code authentication, enter the 4-digit PIN code
(0000 for example) provided by your service provider. If you enter the PIN code
incorrectly, the SIM card may be blocked by your service provider and you cannot
use the account to access the Internet.
If your service provider disabled PIN code authentication, leave this field blank.
Dialed NumberThis is the phone number (dial string) used to dial up a connection to your service
provider’s base station. Your service provider should provide the phone number. For
example, *99# is the dial string to establish a GPRS or 3G/4G connection in Taiwan.
The corresponding phone number automatically displays when you select a predefined service provider.
If you select Others in the Service Provider field, manually enter the phone
number provided by your service provider.
AccountType the user name (of up to 64 ASCII printable characters) given to you by your
service provider.
PasswordType the password (of up to 64 ASCII printable characters) associated with the user
name above.
AuthenticationThe LTE3301 supports PAP (Password Authentication Protocol) and CHAP (Challenge
Primary DNSEnter the first DNS server address assigned by the service provider.
Secondary DNSEnter the second DNS server address assigned by the service provider.
Roaming3G/4G roaming is to use your mobile device in an area which is not covered by your
Connection ControlSelect Auto Reconnect (always-on) if you do not want the connection to time out.
Maximum Idle TimeSpecify the time in minutes that elapses before the LTE3301 automatically
MTUEnter the MTU (Maximum Transmission Unit) of each data packet, in bytes, that can
Handshake Authentication Protocol). CHAP is more secure than PAP; however, PAP is
readily available on more platforms
Select an authentication protocol (PAP, or CHAP) used by the service provider.
Otherwise, select Auto to have the LTE3301 accept either CHAP or PAP.
service provider. Enable roaming to ensure that your LTE3301 is kept connected to
the Internet when you are traveling outside the geographical coverage area of the
network to which you are registered.
Select Connect-on-Demand if you do not want the connection up all the time and
specify an idle time-out in the Maximum Idle Time field.
disconnects from the service provider.
move through the WAN connection.
LTE3301 Series User’s Guide
55
Chapter 6 WAN
Table 14 Network > WAN > Management WAN Edit (continued)
LABELDESCRIPTION
NATSelect this option to turn on Network Address Translation (NAT) for this connection.
Network MonitoringSelect this option to have the LTE3301 test the WAN connection by periodically
sending DNS Query to a DNS server or sending a ping (ICMP Checking) to either
the default gateway or the addresses you specify in the Target1 and Target2 fields.
Loading CheckSelect this option to check how many packets have been transmitted or received
Check IntervalType a number of seconds (0 to 99999) to set the time interval between checks.
Check TimeoutType the number of seconds (0 to 99999) for your LTE3301 to wait for a response to
Latency ThresholdType a number of milliseconds (0 to 99999) for the latency threshold.
Fail ThresholdType how many WAN connection checks can fail (0 to 99999) before the connection is
Target1/Target2Select DNS1 to have the LTE3301 send a DNS query to the first DNS server address
BridgeSelect this option to allow the computer connected to the first Ethernet LAN port to
IGMPSelect IGMP v1, IGMP v2, IGMP v3 or Auto to enable multicasting. This applies to
IGMP ProxyThis field is available only when IGMP is enabled.
through the WAN connection within a time period specified in the Check Interval
field.
Allow more time if your destination IP address handles lots of traffic.
the ping or DNS query before considering the check to have failed. This setting must
be less than the Check Interval. Use a higher value in this field if your network is
busy or congested.
If the specified latency threshold is exceeded, the LTE3301 considers the check to
have failed and makes a new connection after (Latency Threshold * Fail Threshold)
seconds.
considered "down" (not connected). The LTE3301 still checks a "down" connection to
detect if it reconnects.
assigned by the service provider.
Select DNS2 to have the LTE3301 send a DNS query to the second DNS server
address assigned by the service provider.
Select Gateway to have the LTE3301 ping the WAN interface's default gateway IP
address.
Select Other Host and enter a domain name or IP address of a reliable nearby
computer to have the LTE3301 ping that address.
get an individual IP address from the ISP’s DHCP server directly.
traffic routed from the WAN to the LAN.
Select Disable to turn off this feature. This may cause incoming traffic to be dropped
or sent to all connected network devices.
Select this option to have the LTE3301 act as an IGMP proxy on this connection. This
allows the LTE3301 to get subscribing information and maintain a joined member list
for each multicast group. It can reduce multicast traffic significantly.
6.5 Network Scan
Use this screen to set how you want the LTE3301 to connect to an available mobile network. Click
Network > WAN > Network Scan from the Configuration menu.
LTE3301 Series User’s Guide
56
Chapter 6 WAN
Figure 31 Network > WAN > Network Scan
The following table describes the labels in this screen.
Table 15 Network > WAN > Network Scan
LABELDESCRIPTION
Physical InterfaceThis shows the type of the interface used by the WAN connection.
Network TypeSelect the type of the network (4G only, 3G only, or 3G/4G) to which you want the
LTE3301 to connect when there is a SIM card inserted.
Scan ApproachSelect Auto to have the LTE3301 connect to an available network using the default
Network Provider ListThis table is available only when you set Scan Approach to Manually.
Provider NameThis shows the name of the service provider.
Mobile SystemThis shows the mobile telecommunications standard supported by the mobile
Network StatusThis shows whether the mobile network is available.
ActionClick Select to have the LTE3301 establish a connection to the selected mobile
ApplyClick Apply to save your changes back to the LTE3301.
CancelClick Cancel to reload the previous configuration for this screen.
RefreshClick Refresh to update this screen.
settings on the SIM card. If the currently registered mobile network is not available
or the mobile network’s signal strength is too low, the LTE3301 switches to another
available mobile network.
Select Manually to search for and select the mobile network(s) to which you want
the LTE3301 to connect.
Click Scan to search for available mobile networks based on the network type you
selected.
Click Apply to save your changes in the Action field.
network.
network.
LTE3301 Series User’s Guide
57
6.6 IPv6
Use this screen to configure the LTE3301’s IPv6 settings. Click Network > WAN > IPv6 from the
Configuration menu.
Figure 32 Network > WAN > IPv6
Chapter 6 WAN
The following table describes the labels in this screen.
Table 16 Network > WAN > IPv6
LABELDESCRIPTION
IPv6Select Enable to allow the LTE3301 to run IPv6. Otherwise, select Disable.
IPv6 ConnectionSelect Static IPv6 if you have a fixed IPv6 address assigned by your ISP.
Select DHCPv6 if you want to obtain an IPv6 address from a DHCPv6 server.
Select PPPoE if your ISP requires your to use a PPPoE connection to the IPv6
Internet. This method of connection typically requires you to enter a Username and
Password (provided by your ISP) to gain access to the IPv6 Internet. You need to
ensure that any PPPoE client software on your computer is removed or disabled.
Select 6RD to enable IPv6 rapid deployment to tunnel IPv6 traffic from the local
network through the ISP’s IPv4 network
(These fields appear when the IPv6 Connection is set to Static IPv6.)
IPv6 AddressEnter the IPv6 address on the WAN side in this field.
Subnet Prefix LengthEnter the address prefix length to specify how many most significant bits in an IPv6
address compose the network address.
Default GatewayEnter the IP address of the next-hop gateway. The gateway is a router or switch on
the same segment as your LTE3301's interface(s). The gateway helps forward
packets to their destinations.
Primary DNS Address
Secondary DNS
Address
Enter the first IPv6 DNS server address assigned by the ISP.
Enter the second IPv6 DNS server address assigned by the ISP.
LTE3301 Series User’s Guide
58
Chapter 6 WAN
Table 16 Network > WAN > IPv6 (continued)
LABELDESCRIPTION
(These fields appear when the IPv6 Connection is set to DHCPv6.)
DNS SettingSelect Obtain DNS Server address Automatically to have the LTE3301 get the
IPv6 DNS server addresses from the ISP automatically.
Select Use the following DNS address to have the LTE3301 use the IPv6 DNS
server addresses you configure manually.
Primary DNS Address
Secondary DNS
Address
(These fields appear when the IPv6 Connection is set to PPPoE.)
Address ModeSelect Dynamic IP if you have a dynamic IP address.
IP AddressEnter the static IP address provided by your ISP.
UsernameEnter a user name (of up to 31 printable characters) for login using PPPoE
PasswordEnter the password associated with the user name above.
Service NameEnter the name of your PPPoE service here.
Reconnect Mode Select Auto Reconnect (always-on) if you do not want the connection to time out.
Maximum Idle TimeSpecify the time in minutes that elapses before the LTE3301 automatically
(These fields appear when the IPv6 Connection is set to 6RD.)
Remote IPv4 AddressEnter the IPv4 address of the relay server,
IPv4 Mask LengthEnter the IPv4 subnet mask number (1 to 32).
Remote PrefixEnter an IPv6 prefix for tunneling IPv6 traffic to the ISP’s Border Relay router and
Prefix LengthEnter the address prefix length to specify how many most significant bits in an IPv6
Primary DNS Address
Secondary DNS
Address
LAN IPv6 AddressEnter the IPv6 address for the LTE3301 LAN interface in this field.
LAN IPv6 Link-Local
Address
AutoconfigurationClick Enable if you want the devices on your local area network to obtain network
Autoconfiguration Type Select Stateless if you want the LTE3301 interface to automatically generate a link-
Enter the first IPv6 DNS server address assigned by the ISP.
Enter the second IPv6 DNS server address assigned by the ISP.
Select Static IP if the ISP assigned a fixed IP address.
connection.
Select Connection-on-Demand if you want to connect for a certain amount of time
before the router automatically disconnects from the PPPoE server. If you select this
you will need to enter the number of minutes in the Maximum Idle Time field.
Select Manually if want to make the connection manually.
disconnects from the PPPoE server.
connecting to the native IPv6 Internet.
address compose the network address.
Enter the first IPv6 DNS server address assigned by the ISP.
Enter the second IPv6 DNS server address assigned by the ISP.
This shows the IPv6 Link-local address in the LAN side. This is used by LTE3301 when
communicating with neighboring devices on the same link. It allows IPv6-capable
devices to communicate with each other in the LAN side.i
address that are not managed by a DHCPv6 server. Otherwise, select Disable.
local address via stateless autoconfiguration.
IPv6 Address
Range(Start)
Select Stateful (DHCPv6) when the devices connected to your LAN needs to have
their TCP/IP configuration set to DHCPv6 or obtain an IPv6 address automatically.
If you select Stateful (DHCPv6), specify the range of IPv6 addresses from which
the DHCPv6 server assigns to the clients. Enter the smallest value of the last block of
the IPv6 addresses which are to be allocated.
LTE3301 Series User’s Guide
59
Chapter 6 WAN
Table 16 Network > WAN > IPv6 (continued)
LABELDESCRIPTION
IPv6 Address
Range(End)
IPv6 Address LifetimeIf you select Stateful (DHCPv6), specify how long (in minutes) the IPv6 addresses
If you select Stateful (DHCPv6), specify the range of IPv6 addresses from which
the DHCPv6 server assigns to the clients. Enter the largest value of the last block of
the IPv6 addresses which are to be allocated.
remain valid.
LTE3301 Series User’s Guide
60
7.1 Overview
This chapter discusses how to configure the wireless network settings in your LTE3301.
See the appendices for more detailed information about wireless networks.
The following figure provides an example of a wireless network.
Figure 33 Example of a Wireless Network
CHAPTER 7
Wireless LAN
The wireless network is the part in the blue circle. In this wireless network, devices A and B are
called wireless clients. The wireless clients use the access point (AP) to interact with other devices
(such as the printer) or with the Internet. Your LTE3301 is the AP.
LTE3301 Series User’s Guide
61
7.1.1 What You Can Do
•Use the General screen to turn the wireless connection on or off, set up wireless security
between the LTE3301 and the wireless clients, and make other basic configuration changes
(Section 7.2 on page 64).
•Use the More AP screen to set up multiple wireless networks on your LTE3301 (Section 7.4 on
page 71).
•Use the MAC Filter screen to allow or deny wireless stations based on their MAC addresses from
connecting to the LTE3301 (Section 7.5 on page 73).
•Use the Advanced screen to allow intra-BSS networking and set the RTS/CTS Threshold (Section
7.6 on page 75).
•Use the QoS screen to ensure Quality of Service (QoS) in your wireless network (Section 7.7 on
page 76).
•Use the WPS screen to quickly set up a wireless network with strong security, without having to
configure security settings manually (Section 7.8 on page 76).
•Use the WPS Station screen to add a wireless station using WPS (Section 7.9 on page 78).
•Use the Scheduling screen to set the times your wireless LAN is turned on and off (Section 7.10
on page 78).
•Use the WDS screen to configure the LTE3301’s WDS settings (Section 7.11 on page 79).
Chapter 7 Wireless LAN
7.1.2 What You Should Know
Every wireless network must follow these basic guidelines.
• Every wireless client in the same wireless network must use the same SSID.
The SSID is the name of the wireless network. It stands for Service Set IDentity.
• If two wireless networks overlap, they should use different channels.
Like radio stations or television channels, each wireless network uses a specific channel, or
frequency, to send and receive information.
• Every wireless client in the same wireless network must use security compatible with the AP.
Security stops unauthorized devices from using the wireless network. It can also protect the
information that is sent in the wireless network.
Wireless Security Overview
The following sections introduce different types of wireless security you can set up in the wireless
network.
SSID
Normally, the AP acts like a beacon and regularly broadcasts the SSID in the area. You can hide the
SSID instead, in which case the AP does not broadcast the SSID. In addition, you should change
the default SSID to something that is difficult to guess.
This type of security is fairly weak, however, because there are ways for unauthorized devices to
get the SSID. In addition, unauthorized devices can still see the information that is sent in the
wireless network.
LTE3301 Series User’s Guide
62
MAC Address Filter
Chapter 7 Wireless LAN
Every wireless client has a unique identification number, called a MAC address.1 A MAC address is
usually written using twelve hexadecimal characters
00:A0:C5:00:00:02. To get the MAC address for each wireless client, see the appropriate User’s
Guide or other documentation.
You can use the MAC address filter to tell the AP which wireless clients are allowed or not allowed to
use the wireless network. If a wireless client is allowed to use the wireless network, it still has to
have the correct settings (SSID, channel, and security). If a wireless client is not allowed to use the
wireless network, it does not matter if it has the correct settings.
This type of security does not protect the information that is sent in the wireless network.
Furthermore, there are ways for unauthorized devices to get the MAC address of an authorized
wireless client. Then, they can use that MAC address to use the wireless network.
2
; for example, 00A0C5000002 or
User Authentication
You can make every user log in to the wireless network before they can use it. This is called user
authentication. However, every wireless client in the wireless network has to support IEEE 802.1x
to do this.
For wireless networks, there are two typical places to store the user names and passwords for each
user.
• In the AP: this feature is called a local user database or a local database.
• In a RADIUS server: this is a server used in businesses more than in homes.
If your AP does not provide a local user database and if you do not have a RADIUS server, you
cannot set up user names and passwords for your users.
Unauthorized devices can still see the information that is sent in the wireless network, even if they
cannot use the wireless network. Furthermore, there are ways for unauthorized wireless users to
get a valid user name and password. Then, they can use that user name and password to use the
wireless network.
Local user databases also have an additional limitation that is explained in the next section.
Encryption
Wireless networks can use encryption to protect the information that is sent in the wireless
network. Encryption is like a secret code. If you do not know the secret code, you cannot
understand the message.
1.Some wireless devices, such as scanners, can detect wireless networks but cannot use wireless networks. These kinds
of wireless devices might not have MAC addresses.
2.Hexadecimal characters are 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, A, B, C, D, E, and F.
LTE3301 Series User’s Guide
63
Chapter 7 Wireless LAN
The types of encryption you can choose depend on the type of user authentication. (See page 63
for information about this.)
Table 17 Types of Encryption for Each Type of Authentication
NO AUTHENTICATIONRADIUS SERVER
WeakestNo SecurityWPA
Static WEP
WPA-PSK
StrongestWPA2-PSKWPA2
For example, if the wireless network has a RADIUS server, you can choose WPA or WPA2. If users
do not log in to the wireless network, you can choose no encryption, Static WEP, WPA-PSK, or WPA2-PSK.
Usually, you should set up the strongest encryption that every wireless client in the wireless
network supports. For example, suppose the AP does not have a local user database, and you do
not have a RADIUS server. Therefore, there is no user authentication. Suppose the wireless network
has two wireless clients. Device A only supports WEP, and device B supports WEP and WPA.
Therefore, you should set up Static WEP in the wireless network.
Note: It is recommended that wireless networks use WPA-PSK, WPA, or stronger
encryption. IEEE 802.1x and WEP encryption are better than none at all, but it is
still possible for unauthorized devices to figure out the original information pretty
quickly.
Note: It is not possible to use WPA-PSK, WPA or stronger encryption with a local user
database. In this case, it is better to set up stronger encryption with no
authentication than to set up weaker encryption with the local user database.
When you select WPA2 or WPA2-PSK in your LTE3301, you can also select an option (WPA/WPA-PSK Compatible) to support WPA/WPA-PSK as well. In this case, if some wireless clients support
WPA and some support WPA2, you should set up WPA2-PSK or WPA2 (depending on the type of
wireless network login) and select the WPA/WPA-PSK Compatible option in the LTE3301.
Many types of encryption use a key to protect the information in the wireless network. The longer
the key, the stronger the encryption. Every wireless client in the wireless network must have the
same key.
WPS
WiFi Protected Setup (WPS) is an industry standard specification, defined by the WiFi Alliance. WPS
allows you to quickly set up a wireless network with strong security, without having to configure
security settings manually. Depending on the devices in your network, you can either press a
button (on the device itself, or in its configuration utility) or enter a PIN (Personal Identification
Number) in the devices. Then, they connect and set up a secure network by themselves. See how
to set up a secure wireless network using WPS in the Section 4.2 on page 30.
7.2 General Wireless LAN Screen
Use this screen to configure the SSID and wireless security of the wireless LAN.
LTE3301 Series User’s Guide
64
Chapter 7 Wireless LAN
Note: If you are configuring the LTE3301 from a computer connected to the wireless LAN
and you change the LTE3301’s SSID, channel or security settings, you will lose your
wireless connection when you press Apply to confirm. You must then change the
wireless settings of your computer to match the LTE3301’s new settings.
Click Network > Wireless LAN to open the General screen.
Figure 34 Network > Wireless LAN > General
The following table describes the general wireless LAN labels in this screen.
Table 18 Network > Wireless LAN > General
LABELDESCRIPTION
Wireless LAN
Status
Name (SSID) The SSID (Service Set IDentity) identifies the Service Set with which a wireless client is
Hide SSIDSelect this check box to hide the SSID in the outgoing beacon frame so a station cannot
Channel Selection Set the operating frequency/channel depending on your particular region.
Auto Channel
Selection
Operating
Channel
Select Enable to activate the 2.4GHz wireless LAN. Select Disable to turn it off.
You can also enable or disablethe 2.4GHz wireless LANs by using the WIFI button located
on the back panel of the LTE3301.
associated. Enter a descriptive name (up to 32 printable characters found on a typical
English language keyboard) for the wireless LAN.
obtain the SSID through scanning using a site survey tool.
Select a channel from the drop-down list box. The options vary depending on the
frequency band and the country you are in.
Refer to the Connection Wizard chapter for more information on channels. This option is
only available if Auto Channel Selection is disabled.
Select this check box for the LTE3301 to automatically choose the channel with the least
interference. Deselect this check box if you wish to manually select the channel using the
Channel Selection field.
This displays the channel the LTE3301 is currently using.
LTE3301 Series User’s Guide
65
Chapter 7 Wireless LAN
Table 18 Network > Wireless LAN > General (continued)
LABELDESCRIPTION
Channel WidthSelect the wireless channel width used by LTE3301.
A standard 20MHz channel offers transfer speeds of up to 144Mbps (2.4GHz) whereas a
40MHz channel uses two standard channels and offers speeds of up to 300Mbps
(2.4GHz).
Because not all devices support 40 MHz channels, select Auto 20/40MHz to allow the
LTE3301 to adjust the channel bandwidth automatically.
40MHz (channel bonding or dual channel) bonds two adjacent radio channels to increase
throughput. The wireless clients must also support 40 MHz. It is often better to use the 20
MHz setting in a location where the environment hinders the wireless signal.
Select 20MHz if you want to lessen radio interference with other wireless devices in your
neighborhood or the wireless clients do not support channel bonding.
802.11 ModeYou can select from the following:
•802.11b: allows either IEEE 802.11b or IEEE 802.11g compliant WLAN devices to
associate with the LTE3301. In this mode, all wireless devices can only transmit at the
data rates supported by IEEE 802.11b.
•802.11g: allows IEEE 802.11g compliant WLAN devices to associate with the Device.
IEEE 802.11b compliant WLAN devices can associate with the LTE3301 only when they
use the short preamble type.
•802.11bg: allows either IEEE 802.11b or IEEE 802.11g compliant WLAN devices to
associate with the LTE3301. The LTE3301 adjusts the transmission rate automatically
according to the wireless standard supported by the wireless devices.
•802.11n: allows IEEE 802.11n compliant WLAN devices to associate with the
LTE3301. This can increase transmission rates, although IEEE 802.11b or IEEE
802.11g clients will not be able to connect to the LTE3301.
•802.11gn: allows either IEEE 802.11g or IEEE 802.11n compliant WLAN devices to
associate with the LTE3301. The transmission rate of your LTE3301 might be reduced.
•802.11bgn: allows IEEE802.11b, IEEE802.11g and IEEE802.11n compliant WLAN
devices to associate with the LTE3301. The transmission rate of your LTE3301 might
be reduced.
Security ModeSelect Static WEP, WPA-PSK, WPA, WPA2-PSK or WPA2 to add security on this
wireless network. The wireless clients which want to associate to this network must have
same wireless security settings as this device. After you select to use a security,
additional options appears in this screen. See Section 7.3 on page 66 for detailed
information on different security modes. Or you can select No Security to allow any
client to associate this network without authentication.
Note: If the WPS function is enabled (default), only No Security and WPA2-PSK are
available in this field.
ApplyClick Apply to save your changes back to the LTE3301.
CancelClick Cancel to reload the previous configuration for this screen.
See the rest of this chapter for information on the other labels in this screen.
7.3 Wireless Security
The screen varies depending on what you select in the Security Mode field.
7.3.1 No Security
Select No Security to allow wireless clients to communicate with the access points without any
data encryption.
LTE3301 Series User’s Guide
66
Chapter 7 Wireless LAN
Note: If you do not enable any wireless security on your LTE3301, your network is
accessible to any wireless networking device that is within range.
Figure 35 Network > Wireless LAN > General: No Security
The following table describes the labels in this screen.
Table 19 Network > Wireless LAN > General: No Security
LABELDESCRIPTION
Security ModeChoose No Security from the drop-down list box.
ApplyClick Apply to save your changes back to the LTE3301.
CancelClick Cancel to reload the previous configuration for this screen.
7.3.2 WEP Encryption
WEP encryption scrambles the data transmitted between the wireless stations and the access points
to keep network communications private. It encrypts unicast and multicast communications in a
network. Both the wireless stations and the access points must use the same WEP key.
Your LTE3301 allows you to configure up to four 64-bit or 128-bit WEP keys but only one key can be
enabled at any one time.
Select Static WEP from the Security Mode list.
LTE3301 Series User’s Guide
67
Chapter 7 Wireless LAN
Figure 36 Network > Wireless LAN > General: Static WEP
The following table describes the wireless LAN security labels in this screen.
Table 20 Network > Wireless LAN > General: Static WEP
LABELDESCRIPTION
Security ModeSelect Static WEP to enable data encryption.
WEP EncryptionSelect 64-bits or 128-bits.
This dictates the length of the security key that the network is going to use.
Authentication
Method
ASCIISelect this option in order to enter ASCII characters as WEP key.
HexSelect this option in order to enter hexadecimal characters as a WEP key.
Select Auto or Shared Key from the drop-down list box.
This field specifies whether the wireless clients have to provide the WEP key to log into
the wireless network. Keep this setting at Auto unless you want to force a key
verification before communication between the wireless client and the LTE3301 occurs.
Select Shared Key to force the clients to provide the WEP key prior to communication.
The preceding "0x", that identifies a hexadecimal key, is entered automatically.
Key 1 to Key 4The WEP keys are used to encrypt data. Both the LTE3301 and the wireless stations must
use the same WEP key for data transmission.
If you chose 64-bits, then enter any 5 ASCII characters or 10 hexadecimal characters
("0-9", "A-F").
If you chose 128-bits, then enter 13 ASCII characters or 26 hexadecimal characters ("0-
9", "A-F").
You must configure at least one key, only one key can be activated at any one time. The
default key is key 1.
ApplyClick Apply to save your changes back to the LTE3301.
CancelClick Cancel to reload the previous configuration for this screen.
7.3.3 WPA-PSK/WPA2-PSK
Select WPA-PSK or WPA2-PSK from the Security Mode list.
Figure 37 Network > Wireless LAN > General: WPA-PSK/WPA2-PSK
Chapter 7 Wireless LAN
The following table describes the labels in this screen.
Table 21 Network > Wireless LAN > General: WPA-PSK/WPA2-PSK
LABELDESCRIPTION
Security ModeSelect WPA-PSK or WPA2-PSK to enable data encryption.
WPA-PSK
Compatible
This field appears when you choose WPA2-PSK as the Security Mode.
Check this field to allow wireless devices using WPA-PSK security mode to connect to
your LTE3301.
LTE3301 Series User’s Guide
69
Table 21 Network > Wireless LAN > General: WPA-PSK/WPA2-PSK (continued)
LABELDESCRIPTION
Pre-Shared Key WPA-PSK/WPA2-PSK uses a simple common password for authentication.
Group Key Update
Timer
ApplyClick Apply to save your changes back to the LTE3301.
CancelClick Cancel to reload the previous configuration for this screen.
7.3.4 WPA/WPA2
Select WPA or WPA2 from the Security Mode list.
Note: WPA or WPA2 is not available if you enable WPS before you configure WPA or WPA2
in the Wireless LAN > General screen.
Figure 38 Network > Wireless LAN > General: WPA/WPA2
Chapter 7 Wireless LAN
Type a pre-shared key from 8 to 63 case-sensitive keyboard characters.
The Group Key Update Timer is the rate at which the AP sends a new group key out to
all clients.
The default is 3600 seconds (60 minutes).
LTE3301 Series User’s Guide
70
Chapter 7 Wireless LAN
The following table describes the labels in this screen.
Table 22 Network > Wireless LAN > General: WPA/WPA2
LABELDESCRIPTION
Security ModeSelect WPA or WPA2 to enable data encryption.
WPA CompatibleThis check box is available only when you select WPA2-PSK or WPA2 in the Security
Group Key Update
Timer
Authentication Server
IP AddressEnter the IP address of the external authentication server in dotted decimal notation.
Port NumberEnter the port number of the external authentication server.
Shared SecretEnter a password (up to 127 alphanumeric characters) as the key to be shared
ApplyClick Apply to save your changes back to the LTE3301.
CancelClick Cancel to reload the previous configuration for this screen.
Mode field.
Select the check box to have both WPA2 and WPA wireless clients be able to
communicate with the LTE3301 even when the LTE3301 is using WPA2-PSK or WPA2.
The Group Key Update Timer is the rate at which the AP (if using WPA-PSK/WPA2-PSK key management) or RADIUS server (if using WPA/WPA2 key
management) sends a new group key out to all clients. The re-keying process is the
WPA/WPA2 equivalent of automatically changing the WEP key for an AP and all
stations in a WLAN on a periodic basis. Setting of the Group Key Update Timer is
also supported in WPA-PSK/WPA2-PSK mode.
You need not change this value unless your network administrator instructs you to do
so with additional information.
between the external authentication server and the LTE3301.
The key must be the same on the external authentication server and your LTE3301.
The key is not sent over the network.
7.4 More AP Screen
This screen allows you to enable and configure multiple wireless networks and guest wireless
network settings on the LTE3301.
You can configure up to four SSIDs to enable multiple BSSs (Basic Service Sets) on the LTE3301.
This allows you to use one access point to provide several BSSs simultaneously. You can then
assign varying security types to different SSIDs. Wireless clients can use different SSIDs to
associate with the same access point.
Click Network > Wireless LAN > More AP. The following screen displays.
LTE3301 Series User’s Guide
71
Chapter 7 Wireless LAN
Figure 39 Network > Wireless LAN > More AP
The following table describes the labels in this screen.
Table 23 Network > Wireless LAN > More AP
LABELDESCRIPTION
#This is the index number of each SSID profile.
StatusThis shows whether the SSID profile is active (a yellow bulb) or not (a gray bulb).
SSIDAn SSID profile is the set of parameters relating to one of the LTE3301’s BSSs. The SSID
(Service Set IDentifier) identifies the Service Set with which a wireless device is associated.
This field displays the name of the wireless profile on the network. When a wireless client
scans for an AP to associate with, this is the name that is broadcast and seen in the
wireless client utility.
SecurityThis field indicates the security mode of the SSID profile.
EditClick the Edit icon to configure the SSID profile.
7.4.1 More AP Edit
Use this screen to edit an SSID profile. Click the Edit icon next to an SSID in the More AP screen.
The following screen displays.
Figure 40 Network > Wireless LAN > More AP: Edit
LTE3301 Series User’s Guide
72
Chapter 7 Wireless LAN
The following table describes the labels in this screen.
Table 24 Network > Wireless LAN > More AP: Edit
LABELDESCRIPTION
ActiveSelect this to activate the SSID profile.
Name (SSID) The SSID (Service Set IDentity) identifies the Service Set with which a wireless client is
Hide SSIDSelect this check box to hide the SSID in the outgoing beacon frame so a station cannot
Intra-BSS Traffic A Basic Service Set (BSS) exists when all communications between wireless clients or
WMM QoSCheck this to have the LTE3301 automatically give a service a priority level according to the
Security ModeSelect Static WEP, WPA-PSK, WPA, WPA2-PSK or WPA2 to add security on this
associated. Enter a descriptive name (up to 32 printable characters found on a typical
English language keyboard) for the wireless LAN.
obtain the SSID through scanning using a site survey tool.
between a wireless client and a wired network client go through one access point (AP).
Intra-BSS traffic is traffic between wireless clients in the BSS. When Intra-BSS is enabled,
wireless clients can access the wired network and communicate with each other. When
Intra-BSS is disabled, wireless clients can still access the wired network but cannot
communicate with each other.
ToS value in the IP header of packets it sends.
WMM QoS (Wifi MultiMedia Quality of Service) gives high priority to voice and video, which
makes them run more smoothly.
wireless network. The wireless clients which want to associate to this network must have
same wireless security settings as this device. After you select to use a security, additional
options appears in this screen. See Section 7.3 on page 66 for detailed information on
different security modes. Or you can select No Security to allow any client to associate
this network without authentication.
Note: If the WPS function is enabled (default), only No Securi ty and WPA2-PSK are
available in this field.
ApplyClick Apply to save your changes back to the LTE3301.
CancelClick Cancel to reload the previous configuration for this screen.
7.5 MAC Filter Screen
The MAC filter screen allows you to configure the LTE3301 to give exclusive access to devices
(Allow) or exclude devices from accessing the LTE3301 (Deny). Every Ethernet device has a
unique MAC (Media Access Control) address. The MAC address is assigned at the factory and
consists of six pairs of hexadecimal characters, for example, 00:A0:C5:00:00:02. You need to know
the MAC address of the devices to configure this screen.
To change your LTE3301’s MAC filter settings, click Network > Wireless LAN > MAC Filter. The
screen appears as shown.
LTE3301 Series User’s Guide
73
Chapter 7 Wireless LAN
Figure 41 Network > Wireless LAN > MAC Filter
The following table describes the labels in this menu.
Table 25 Network > Wireless LAN > MAC Filter
LABELDESCRIPTION
MAC Address
Filter
Filter ActionDefine the filter action for the list of MAC addresses in the MAC Filter Summary table.
MAC Filter Summary
SetThis is the index number of the MAC address.
MAC AddressEnter the MAC address of the wireless station that are allowed or denied access to the
ApplyClick Apply to save your changes back to the LTE3301.
CancelClick Cancel to reload the previous configuration for this screen.
Select to turn on (Enable) or off (Disable) MAC address filtering.
Select Allow to permit access to the LTE3301, MAC addresses not listed will be denied
access to the LTE3301.
Select Deny to block access to the LTE3301, MAC addresses not listed will be allowed to
access the LTE3301.
LTE3301.
LTE3301 Series User’s Guide
74
Chapter 7 Wireless LAN
7.6 Wireless LAN Advanced Screen
Use this screen to allow wireless advanced features, such as the output power, RTS/CTS Threshold
settings.
Click Network > Wireless LAN > Advanced. The screen appears as shown.
Figure 42 Network > Wireless LAN > Advanced
The following table describes the labels in this screen.
Table 26 Network > Wireless LAN > Advanced
LABELDESCRIPTION
RTS/CTS
Threshold
Fragmentation
Threshold
Intra-BSS TrafficA Basic Service Set (BSS) exists when all communications between wireless clients or
Green APSelect Enable to reduce the power consumption by adjusting the output power. The
Tx PowerSet the output power of the LTE3301 in this field. If there is a high density of APs in an
Beacon IntervalWhen a wirelessly networked device sends a beacon, it includes with it a beacon interval.
Data with its frame size larger than this value will perform the RTS (Request To Send)/
CTS (Clear To Send) handshake.
This field is not configurable and the LTE3301 automatically changes to use the maximum
value if you select 802.11n, 802.11gn or 802.11bgn in the Wireless LAN > General
screen.
The threshold (number of bytes) for the fragmentation boundary for directed messages.
It is the maximum data fragment size that can be sent.
This field is not configurable and the LTE3301 automatically changes to use the maximum
value if you select 802.11n, 802.11gn or 802.11bgn in the Wireless LAN > General
screen.
between a wireless client and a wired network client go through one access point (AP).
Intra-BSS traffic is traffic between wireless clients in the BSS. When Intra-BSS is
enabled, wireless clients can access the wired network and communicate with each other.
When Intra-BSS is disabled, wireless clients can still access the wired network but cannot
communicate with each other.
LTE3301 reduces the output power of the transmitter from about 260mA to 188mA when
there is no IEEE 802.11 wireless clients associated with the LTE3301 wireless network.
area, decrease the output power of the LTE3301 to reduce interference with other APs.
Select one of the following 100%, 90%, 75%, 50%, 25% or 10%.
This specifies the time period before the device sends the beacon again. The interval tells
receiving devices on the network how long they can wait in low-power mode before
waking up to handle the beacon. A high value helps save current consumption of the
access point.
LTE3301 Series User’s Guide
75
Chapter 7 Wireless LAN
Table 26 Network > Wireless LAN > Advanced (continued)
LABELDESCRIPTION
ApplyClick Apply to save your changes back to the LTE3301.
CancelClick Cancel to reload the previous configuration for this screen.
7.7 Quality of Service (QoS) Screen
The QoS screen allows you to automatically give a service (such as VoIP and video) a priority level.
Click Network > Wireless LAN > QoS. The following screen appears.
Figure 43 Network > Wireless LAN > QoS
The following table describes the labels in this screen.
Table 27 Network > Wireless LAN > QoS
LABELDESCRIPTION
WMM QoSSelect Enable to have the LTE3301 automatically give a service a priority level
ApplyClick Apply to save your changes to the LTE3301.
CancelClick Cancel to reload the previous configuration for this screen.
7.8 WPS Screen
Use this screen to enable/disable WPS, view or generate a new PIN number and check current WPS
status. To open this screen, click Network > Wireless LAN > WPS.
Note: With WPS, wireless clients can only connect to the wireless network using the first
SSID on the LTE3301.
according to the ToS value in the IP header of packets it sends. WMM QoS (Wifi
MultiMedia Quality of Service) gives high priority to voice and video, which makes
them run more smoothly.
This field is not configurable and the LTE3301 automatically enables WMM QoS if you
select 802.11n, 802.11gn or 802.11bgn in the Wireless LAN > General screen.
LTE3301 Series User’s Guide
76
Chapter 7 Wireless LAN
Figure 44 Network > Wireless LAN > WPS
The following table describes the labels in this screen.
Table 28 Network > Wireless LAN > WPS
LABELDESCRIPTION
WPS Setup
WPSSelect Enable to turn on the WPS feature. Otherwise, select Disable.
PIN CodeSelect Enable and click Apply to allow the PIN Configuration method. If you select
Disable, you cannot create a new PIN number.
PIN NumberThis is the WPS PIN (Personal Identification Number) of the LTE3301. Enter this PIN in
the configuration utility of the device you want to connect to the LTE3301 using WPS.
The PIN is not necessary when you use WPS push-button method.
Click Generate to generate a new PIN number.
WPS Status
StatusThis displays Configured when the LTE3301 has connected to a wireless network using
Release
Configuration
802.11 ModeThis is the 802.11 mode used. Only compliant WLAN devices can associate with the
SSIDThis is the name of the wireless network (the LTE3301’s first SSID).
SecurityThis is the type of wireless security employed by the network.
ApplyClick Apply to save your changes back to the LTE3301.
CancelClick Cancel to reload the previous configuration for this screen.
WPS or when WPS Enable is selected and wireless or wireless security settings have
been changed. The current wireless and wireless security settings also appear in the
screen.
This displays Unconfigured if WPS is disabled and there are no wireless or wireless
security changes on the LTE3301 or you click Release Configuration to remove the
configured wireless and wireless security settings.
This button is only available when the WPS status displays Configured.
Click this button to remove all configured wireless and wireless security settings for WPS
connections on the LTE3301.
LTE3301.
LTE3301 Series User’s Guide
77
7.9 WPS Station Screen
Use this screen when you want to add a wireless station using WPS. To open this screen, click
Network > Wireless LAN > WPS Station tab.
Note: After you click Push Button on this screen, you have to press a similar button in
the wireless station utility within 2 minutes. To add the second wireless station, you
have to press these buttons on both device and the wireless station again after the
first 2 minutes.
Figure 45 Network > Wireless LAN > WPS Station
Chapter 7 Wireless LAN
The following table describes the labels in this screen.
Table 29 Network > Wireless LAN > WPS Station
LABELDESCRIPTION
Push ButtonUse this button when you use the PBC (Push Button Configuration) method to configure
wireless station’s wireless settings.
Click this to start WPS-aware wireless station scanning and the wireless security
information synchronization.
Or input station’s
PIN number
Use this button when you use the PIN Configuration method to configure wireless
station’s wireless settings.
Type the same PIN number generated in the wireless station’s utility. Then click Start to
associate to each other and perform the wireless security information synchronization.
7.10 Scheduling Screen
Use this screen to set the times your wireless LAN is turned on and off. Wireless LAN scheduling is
disabled by default. The wireless LAN can be scheduled to turn on or off on certain days and at
certain times. To open this screen, click Network > Wireless LAN > Scheduling tab.
LTE3301 Series User’s Guide
78
Chapter 7 Wireless LAN
Figure 46 Network > Wireless LAN > Scheduling
The following table describes the labels in this screen.
Table 30 Network > Wireless LAN > Scheduling
LABELDESCRIPTION
Wireless LAN
Scheduling
PolicySelect On or Off to specify whether the Wireless LAN is turned on or off. This field works
Scheduling
DaySelect Everyday or the specific days to turn the Wireless LAN on or off. If you select
For the following
times (24-Hour
Format)
ApplyClick Apply to save your changes back to the LTE3301.
CancelClick Cancel to reload the previous configuration for this screen.
7.11 WDS Screen
Select Enable to activate the wireless LAN scheduling feature. Select Disable to turn it
off.
in conjunction with the Day and For the following times fields.
Everyday you can not select any specific days. This field works in conjunction with the
For the following times field.
Select a begin time using the first set of hour and minute (min) drop down boxes and
select an end time using the second set of hour and minute (min) drop down boxes. If
you have chosen On earlier for the WLAN Status the Wireless LAN will turn on between
the two times you enter in these fields. If you have chosen Off earlier for the WLAN
Status the Wireless LAN will turn off between the two times you enter in these fields.
A Wireless Distribution System (WDS) is a wireless connection between two or more APs. Use this
screen to configure the LTE3301’s WDS settings. To open this screen, click Network > Wireless LAN > WDS tab.
LTE3301 Series User’s Guide
79
Chapter 7 Wireless LAN
Figure 47 Network > Wireless LAN > WDS
The following table describes the labels in this screen.
Table 31 Network > Wireless LAN > WDS
LABELDESCRIPTION
WDS Setup
Basic SettingSelect Disable to turn off the WDS function on the LTE3301.
Select AP+Bridge to have the LTE3301 function as a bridge and access point
simultaneously.
Select Bridge Only to have the LTE3301 act as a wireless bridge only.
Local MAC AddressThis shows the MAC address of the LTE3301.
Phy ModeSelect the physical mode supported by the LTE3301.
You must also set the peer device to use the same physical mode.
Remote MAC
Address
Security
Encryp TypeSelect the type of security you want to use (TKIP or AES) to secure traffic on your
Encryp KeyType a pre-shared key from 8 to 63 case-sensitive ASCII characters (including spaces
ApplyClick Apply to save your changes back to the LTE3301.
ResetClick Reset to reload the previous configuration for this screen.
Type the MAC address of the peer device in a valid MAC address format, that is, six
hexadecimal character pairs, for example, 12:34:56:78:9a:bc.
WDS. Otherwise, select No Security.
Select TKIP to enable Temporal Key Integrity Protocol (TKIP) security on your WDS.
This option is compatible with other ZyXEL access points that support WDS security. Use
this if the other access points on your network support WDS security but do not have an
AES option.
AES provides superior security to TKIP. Use AES if the other access points on your
network support it for the WDS.
and symbols).
You must also set the peer device to use the same pre-shared key.
LTE3301 Series User’s Guide
80
8.1 Overview
This chapter describes how to configure LAN settings.
A Local Area Network (LAN) is a shared communication system to which many computers are
attached. A LAN is a computer network limited to the immediate area, usually the same building or
floor of a building.
Figure 48 LAN Example
CHAPTER 8
LAN
The LAN screens can help you configure a manage IP address, and partition your physical network
into logical networks.
8.2 What You Can Do
•Use the IP screen to change the IP address for your LTE3301 (Section 8.4 on page 82).
8.3 What You Need To Know
The actual physical connection determines whether the LTE3301 ports are LAN or WAN ports. There
are two separate IP networks, one inside the LAN network and the other outside the WAN network
as shown next.
LTE3301 Series User’s Guide
81
Chapter 8 LAN
Figure 49 LAN and WAN IP Addresses
The LAN parameters of the LTE3301 are preset in the factory with the following values:
• IP address of 192.168.1.1 with subnet mask of 255.255.255.0 (24 bits)
• DHCP server enabled with 32 client IP addresses starting from 192.168.1.33.
These parameters should work for the majority of installations. If your ISP gives you explicit DNS
server address(es), read the embedded Web Configurator help regarding what fields need to be
configured.
8.4 LAN IP Screen
Use this screen to change the IP address for your LTE3301. Click Network > LAN > IP.
Figure 50 Network > LAN > IP
The following table describes the labels in this screen.
Table 32 Network > LAN > IP
LABELDESCRIPTION
IP AddressType the IP address of your LTE3301 in dotted decimal notation.
IP Subnet MaskThe subnet mask specifies the network number portion of an IP address. Your LTE3301
will automatically calculate the subnet mask based on the IP address that you assign.
Unless you are implementing subnetting, use the subnet mask computed by the
LTE3301.
ApplyClick Apply to save your changes back to the LTE3301.
CancelClick Cancel to begin configuring this screen afresh.
LTE3301 Series User’s Guide
82
9.1 Overview
DHCP (Dynamic Host Configuration Protocol, RFC 2131 and RFC 2132) allows individual clients to
obtain TCP/IP configuration at start-up from a server. You can configure the LTE3301’s LAN as a
DHCP server or disable it. When configured as a server, the LTE3301 provides the TCP/IP
configuration for the clients. If DHCP service is disabled, you must have another DHCP server on
your LAN, or else the computer must be manually configured.
9.1.1 What You Can Do
•Use the General screen to enable the DHCP server (Section 9.2 on page 83).
•Use the Advanced screen to assign IP addresses on the LAN to specific individual computers
based on their MAC Addresses (Section 9.3 on page 85).
•Use the Client List screen to view the current DHCP client information (Section 9.4 on page 87).
CHAPTER 9
DHCP Server
9.1.2 What You Need To Know
The following terms and concepts may help as you read through this chapter.
MAC Addresses
Every Ethernet device has a unique MAC (Media Access Control) address. The MAC address is
assigned at the factory and consists of six pairs of hexadecimal characters, for example,
00:A0:C5:00:00:02. Find out the MAC addresses of your network devices if you intend to add them
to the DHCP Client List screen.
IP Pool Setup
The LTE3301 is pre-configured with a pool of 32 IP addresses starting from 192.168.1.33 to
192.168.1.64. This configuration leaves 31 IP addresses (excluding the LTE3301 itself) in the lower
range (192.168.1.2 to 192.168.1.32) for other server computers, for instance, servers for mail,
FTP, TFTP, web, etc., that you may have.
9.2 DHCP Server General Screen
The LTE3301 has built-in DHCP server capability that assigns IP addresses to systems that support
DHCP client capability. Use this screen to enable the DHCP server. Click Network > DHCP Server.
The following screen displays.
LTE3301 Series User’s Guide
83
Chapter 9 DHCP Server
Figure 51 Network > DHCP Server > General
The following table describes the labels in this screen.
Table 33 Network > DHCP Server > General
LABELDESCRIPTION
DHCP ServerSelect Enable to activate DHCP for LAN.
DHCP (Dynamic Host Configuration Protocol, RFC 2131 and RFC 2132) allows
individual clients (computers) to obtain TCP/IP configuration at startup from a server.
Enable the DHCP server unless your ISP instructs you to do otherwise. Select Disable
to stop the LTE3301 acting as a DHCP server. When configured as a server, the
LTE3301 provides TCP/IP configuration for the clients. If not, DHCP service is disabled
and you must have another DHCP server on your LAN, or else the computers must be
manually configured. When set as a server, fill in the following four fields.
IP Pool Starting
Address
Pool SizeThis field specifies the size, or count of the IP address pool for LAN.
DHCP RelaySelect this option to have the LTE3301 forward DHCP requests to the DHCP server.
This field specifies the first of the contiguous addresses in the IP address pool for LAN.
LTE3301 Series User’s Guide
84
Chapter 9 DHCP Server
Table 33 Network > DHCP Server > General (continued)
LABELDESCRIPTION
DHCP Server IPThis field is configurable only when you select DHCP Relay.
Enter the IP address of the actual remote DHCP server in this field.
Lease TimeThis is the period of time DHCP-assigned addresses is used. DHCP automatically
VLAN DHCP x Server
This section is configurable only when you create a corresponding VLAN group in the Interface Group
screen.
DHCP ServerSelect Enable to activate DHCP for the VLAN group.
DHCP IP AddressEnter the LAN IP address you want to assign to your LTE3301 in this VLAN group.
First DNS Server
assigns IP addresses to clients when they log in. DHCP centralizes IP address
management on central computers that run the DHCP server program. DHCP leases
addresses, for a period of time, which means that past addresses are “recycled” and
made available for future reassignment to other systems.
Specify the IP addresses up to two DNS servers for the DHCP clients to use.
Second DNS Server
ApplyClick Apply to save your changes back to the LTE3301.
CancelClick Cancel to begin configuring this screen afresh.
Select Obtained From ISP if your ISP dynamically assigns DNS server information
(and the LTE3301's WAN IP address). The field to the right displays the (read-only)
DNS server IP address that the ISP assigns.
Select User-Defined if you have the IP address of a DNS server. Enter the DNS
server's IP address in the field to the right.
Select DNS Relay to have the LTE3301 act as a DNS proxy. The LTE3301's LAN IP
address displays in the field to the right (read-only). The LTE3301 tells the DHCP
clients on the LAN that the LTE3301 itself is the DNS server. When a computer on the
LAN sends a DNS query to the LTE3301, the LTE3301 forwards the query to the
LTE3301's system DNS server (configured in the WAN screen) and relays the
response back to the computer.
9.3 DHCP Server Advanced Screen
This screen allows you to assign IP addresses on the LAN to specific individual computers based on
their MAC addresses. You can also use this screen to configure the DNS server information that the
LTE3301 sends to the DHCP clients.
To change your LTE3301’s static DHCP settings, click Network > DHCP Se rv e r > Advanced. The
following screen displays.
LTE3301 Series User’s Guide
85
Chapter 9 DHCP Server
Figure 52 Network > DHCP Server > Advanced
The following table describes the labels in this screen.
Table 34 Network > DHCP Server > Advanced
LABELDESCRIPTION
Static DHCP Table
#This is the index number of the static IP table entry (row).
MAC AddressType the MAC address (with colons) of a computer on your LAN.
IP AddressType the LAN IP address of a computer on your LAN.
DNS Server
DNS Servers
Assigned by DHCP
Server
First DNS Server
Second DNS Server
ApplyClick Apply to save your changes back to the LTE3301.
CancelClick Cancel to begin configuring this screen afresh.
The LTE3301 passes a DNS (Domain Name System) server IP address (in the order you
specify here) to the DHCP clients. The LTE3301 only passes this information to the LAN
DHCP clients when you enable DHCP Server in the General screen. When you disable
DHCP Server , DHCP service is disabled and you must have another DHCP sever on your
LAN, or else the computers must have their DNS server addresses manually configured.
Select Obtained From ISP if your ISP dynamically assigns DNS server information
(and the LTE3301's WAN IP address). The field to the right displays the (read-only) DNS
server IP address that the ISP assigns.
Select User-Defined if you have the IP address of a DNS server. Enter the DNS server's
IP address in the field to the right.
Select DNS Relay to have the LTE3301 act as a DNS proxy. The LTE3301's LAN IP
address displays in the field to the right (read-only). The LTE3301 tells the DHCP clients
on the LAN that the LTE3301 itself is the DNS server. When a computer on the LAN
sends a DNS query to the LTE3301, the LTE3301 forwards the query to the LTE3301's
system DNS server (configured in the WAN screen) and relays the response back to the
computer.
LTE3301 Series User’s Guide
86
Chapter 9 DHCP Server
9.4 DHCP Client List Screen
The DHCP table shows current DHCP client information (including IP Address, Host Name and MAC
Address) of network clients using the LTE3301’s DHCP servers.
Configure this screen to always assign an IP address to a MAC address (and host name). Click
Network > DHCP Server > Client List.
Note: You can also view a read-only client list by clicking Monitor > DHCP Server.
Figure 53 Network > DHCP Server > Client List
The following table describes the labels in this screen.
Table 35 Network > DHCP Server > Client List
LABEL DESCRIPTION
# This is the index number of the host computer.
StatusThis field displays whether the connection to the host computer is up (a yellow bulb) or
down (a gray bulb).
Host NameThis field displays the computer host name.
IP AddressThis field displays the IP address relative to the # field listed above.
MAC AddressThis field shows the MAC address of the computer with the name in the Host Name field.
Every Ethernet device has a unique MAC (Media Access Control) address which uniquely
identifies a device. The MAC address is assigned at the factory and consists of six pairs of
hexadecimal characters, for example, 00:A0:C5:00:00:02.
ReserveSelect this if you want to reserve the IP address for this specific MAC address.
ApplyClick Apply to save your changes back to the LTE3301.
CancelClick Cancel to reload the previous configuration for this screen.
LTE3301 Series User’s Guide
87
10.1 Overview
A: 192.168.1.33
B: 192.168.1.34
C: 192.168.1.35
IP address
192.168.1.1
WANLAN
assigned by ISP
FTP, Telnet, SNMP
Port 80
Ports 21 to 25
NAT (Network Address Translation - NAT, RFC 1631) is the translation of the IP address of a host in
a packet. For example, the source address of an outgoing packet, used within one network is
changed to a different IP address known within another network.
The figure below is a simple illustration of a NAT network. You want to assign ports 21-25 to one
FTP, Telnet and SMTP server (A in the example), port 80 to another (B in the example) and assign
a default server IP address of 192.168.1.35 to a third (C in the example).
You assign the LAN IP addresses to the devices (A to D) connected to your LTE3301. The ISP
assigns the WAN IP address. The NAT network appears as a single host on the Internet. All traffic
coming from A to D going out to the Internet use the IP address of the LTE3301, which is
192.168.1.1.
CHAPTER 10
NAT
10.1.1 What You Can Do
Figure 54 NAT Example
Note: You must create a firewall rule in addition to setting up NAT, to allow traffic from
the WAN to be forwarded through the LTE3301.
•Use the General screen to enable NAT (Section 10.2 on page 89).
•Use the Port Forwarding screen to set a default server and change your LTE3301’s port
forwarding settings to forward incoming service requests to the server(s) on your local network
(Section 10.3 on page 89).
LTE3301 Series User’s Guide
88
•Use the Port Trigger screen to change your LTE3301’s trigger port settings (Section 10.4 on
page 92).
•Use the ALG screen to enable or disable SIP (VoIP) ALG (Application Layer Gateway) in the
LTE3301 (Section 10.5 on page 93).
10.2 General Screen
Use this screen to enable NAT and set a default server. Click Network > NAT to open the General
screen.
Figure 55 Network > NAT > General
Chapter 10 NAT
The following table describes the labels in this screen.
Table 36 Network > NAT > General
LABELDESCRIPTION
Network Address
Tra ns lation (NAT)
NAT LoopbackNAT loopback allows local users to use a domain name to access a server on the local
ApplyClick Apply to save your changes back to the LTE3301.
CancelClick Cancel to begin configuring this screen afresh.
Network Address Translation (NAT) allows the translation of an Internet protocol
address used within one network (for example a private IP address used in a local
network) to a different IP address known within another network (for example a public
IP address used on the Internet).
Select Enable to activate NAT. Select Disable to turn it off.
network. A packet sent to the public (WAN) IP address is always forwarded to the
default gateway (the LTE3301). With NAT loopback enabled, the LTE3301 uses the WAN
interface’s IP address as the packet’s source address and treats the packet as if it came
from the WAN interface. The packet then can be forwarded to the local server according
to the port forwarding rule.
Select Enable to activate NAT loopback. Select Disable to turn it off.
10.3 Port Forwarding Screen
Use this screen to forward incoming service requests to the server(s) on your local network and set
a default server. You may enter a single port number or a range of port numbers to be forwarded,
and the local IP address of the desired server. The port number identifies a service; for example,
web service is on port 80 and FTP on port 21. In some cases, such as for unknown services or
where one server can support more than one service (for example both FTP and web service), it
might be better to specify a range of port numbers.
LTE3301 Series User’s Guide
89
Chapter 10 NAT
In addition to the servers for specified services, NAT supports a default server. A service request
that does not have a server explicitly designated for it is forwarded to the default server. If the
default is not defined, the service request is simply discarded.
Note: Many residential broadband ISP accounts do not allow you to run any server
processes (such as a Web or FTP server) from your location. Your ISP may
periodically check for servers and may suspend your account if it discovers any
active services at your location. If you are unsure, refer to your ISP.
Port forwarding allows you to define the local servers to which the incoming services will be
forwarded. To change your LTE3301’s port forwarding settings, click Network > NAT > Port Forwarding. The screen appears as shown.
Note: If you do not assign a Default Server, the LTE3301 discards all packets received
for ports that are not specified in this screen or remote management.
Refer to Appendix C on page 174 for port numbers commonly used for particular services.
Figure 56 Network > NAT > Port Forwarding
The following table describes the labels in this screen.
Table 37 Network > NAT > Port Forwarding
LABELDESCRIPTION
Default Server Setup
Default ServerIn addition to the servers for specified services, NAT supports a default server. A default
Change to ServerSelect this and manually enter the server’s IP address.
server receives packets from ports that are not specified in the Port Forwarding
screen. You can decide whether you want to use the default server or specify a server
manually.
Select this to use the default server.
LTE3301 Series User’s Guide
90
Chapter 10 NAT
Table 37 Network > NAT > Port Forwarding (continued)
LABELDESCRIPTION
Service NameSelect a pre-defined service from the drop-down list box. The pre-defined service port
number(s) and protocol will be displayed in the port forwarding summary table.
Otherwise, select User define to manually enter the service name and port number(s)
and select the IP protocol.
Service ProtocolSelect the transport layer protocol supported by this virtual server. Choices are TCP,
UDP, or TCP_UDP.
If you have chosen a pre-defined service in the Service Name field, the protocol will be
configured automatically.
WAN InterfaceSelect the WAN interface on which the matched packets are received.
Port RangeSpecify the first and last external port numbers that identify the service.
If you have chosen a pre-defined service in the Service Name field, the port number(s)
will be configured automatically.
Tra ns lation Port
Range
Server IP AddressEnter the inside IP address of the virtual server here and click Add to add it in the port
#This is the number of an individual port forwarding server entry.
StatusThis icon is turned on when the rule is enabled.
NameThis field displays a name to identify this rule.
ProtocolThis is the transport layer protocol used for the service.
WAN InterfaceThis field displays the WAN interface on which the matched packets are received.
PortThis field displays the port number(s).
Port This field displays the external port number(s) that identifies the service.
Tra ns lation Port This field displays the internal port number(s) that identifies the service.
Server IP AddressThis field displays the inside IP address of the server.
ModifyClick the Edit icon to open the edit screen where you can modify an existing rule.
ApplyClick Apply to save your changes back to the LTE3301.
CancelClick Cancel to begin configuring this screen afresh.
Specify the first and last internal port numbers that identify the service.
If you have chosen a pre-defined service in the Service Name field, the port number(s)
will be configured automatically.
forwarding summary table.
Click the Delete icon to remove a rule.
10.3.1 Port Forwarding Edit Screen
This screen lets you edit a port forwarding rule. Click a rule’s Edit icon in the Port Forwarding
screen to open the following screen.
LTE3301 Series User’s Guide
91
Chapter 10 NAT
Figure 57 Network > NAT > Port Forwarding Edit
The following table describes the labels in this screen.
Table 38 Network > NAT > Port Forwarding Edit
LABELDESCRIPTION
Port ForwardingSelect Enable to turn on this rule and the requested service can be forwarded to the host
with a specified internal IP address.
Select Disable to disallow forwarding of these ports to an inside server without having to
delete the entry.
Service NameSelect User define and type a name (of up to 31 printable characters) to identify this rule
Service ProtocolSelect the transport layer protocol supported by this virtual server. Choices are TCP, UDP,
in the first field next to Service Name. Otherwise, select a predefined service in the
second field next to Service Name. The predefined service name and port number(s) will
display in the Service Name and Port Range fields.
or TCP_UDP.
If you have chosen a pre-defined service in the Service Name field, the protocol will be
configured automatically.
WAN InterfaceSelect the WAN interface on which the matched packets are received.
Port RangeType a port number(s) to define the service to be forwarded to the specified server.
To specify a range of ports, enter the first number and the last number of the range.
Tra ns lation Port
Range
Server IP
Address
BackClick Back to return to the previous screen.
ApplyClick Apply to save your changes back to the LTE3301.
CancelClick Cancel to begin configuring this screen afresh.
Enter a port number to which you want the incoming ports translated.
For a range of ports, enter the first number and the last number of the range.
Type the IP address of the server on your LAN that receives packets from the port(s)
specified in the Port Range field.
10.4 Port Trigger Screen
To change your LTE3301’s trigger port settings, click Network > NAT > Port Trigger. The screen
appears as shown.
Note: Only one LAN computer can use a trigger port (range) at a time.
LTE3301 Series User’s Guide
92
Chapter 10 NAT
Figure 58 Network > NAT > Port Trigger
The following table describes the labels in this screen.
Table 39 Network > NAT > Port Trigger
LABELDESCRIPTION
#This is the rule index number (read-only).
NameType a unique name (up to 15 characters) for identification purposes. All characters are
permitted - including spaces.
WAN InterfaceSelect the WAN interface through which the matched packets are transmitted.
Incoming PortIncoming Port is a port (or a range of ports) that a server on the WAN uses when it sends
Start PortType a port number or the starting port number in a range of port numbers.
End PortType a port number or the ending port number in a range of port numbers.
Trigger PortThe trigger port is a port that causes (or triggers) the LTE3301 to record the IP address of
ApplyClick Apply to save your changes back to the LTE3301.
CancelClick Cancel to begin configuring this screen afresh.
out a particular service. The LTE3301 forwards the traffic with this port (or range of ports)
to the client computer on the LAN that requested the service.
the LAN computer that sent the traffic to a server on the WAN.
10.5 ALG Screen
Some NAT routers may include a SIP Application Layer Gateway (ALG). A SIP ALG allows SIP calls
to pass through NAT by examining and translating IP addresses embedded in the data stream.
When the LTE3301 registers with the SIP register server, the SIP ALG translates the LTE3301’s
private IP address inside the SIP data stream to a public IP address. You do not need to use STUN
or an outbound proxy if your LTE3301 is behind a SIP ALG
LTE3301 Series User’s Guide
93
Chapter 10 NAT
To enable and disable the SIP ALG in the LTE3301, click Network > NAT > ALG. The screen
appears as shown.
Figure 59 Network > NAT > ALG
The following table describes the labels in this screen.
Table 40 Network > NAT > ALG
LABELDESCRIPTION
ALG-SIPSelect Enable to make sure SIP (VoIP) works correctly with port-forwarding and
address-mapping rules. Otherwise, select Disable to turn off the SIP ALG.
ApplyClick Apply to save your changes back to the LTE3301.
CancelClick Cancel to begin configuring this screen afresh.
10.6 Technical Reference
The following section contains additional technical information about the LTE3301 features
described in this chapter.
10.6.1 NATPort Forwarding: Services and Port Numbers
A port forwarding set is a list of inside (behind NAT on the LAN) servers, for example, web or FTP,
that you can make accessible to the outside world even though NAT makes your whole inside
network appear as a single machine to the outside world.
Use the Port Forwarding screen to forward incoming service requests to the server(s) on your
local network. You may enter a single port number or a range of port numbers to be forwarded, and
the local IP address of the desired server. The port number identifies a service; for example, web
service is on port 80 and FTP on port 21. In some cases, such as for unknown services or where one
server can support more than one service (for example both FTP and web service), it might be
better to specify a range of port numbers.
In addition to the servers for specified services, NAT supports a default server. A service request
that does not have a server explicitly designated for it is forwarded to the default server. If the
default is not defined, the service request is simply discarded.
Note: Many residential broadband ISP accounts do not allow you to run any server
processes (such as a Web or FTP server) from your location. Your ISP may
periodically check for servers and may suspend your account if it discovers any
active services at your location. If you are unsure, refer to your ISP.
LTE3301 Series User’s Guide
94
Chapter 10 NAT
10.6.2 NAT Port Forwarding Example
Let's say you want to assign ports 21-25 to one FTP, Telnet and SMTP server (A in the example),
port 80 to another (B in the example) and assign a default server IP address of 192.168.1.35 to a
third (C in the example). You assign the LAN IP addresses and the ISP assigns the WAN IP address.
The NAT network appears as a single host on the Internet.
Figure 60 Multiple Servers Behind NAT Example
10.6.3 Trigger Port Forwarding
Some services use a dedicated range of ports on the client side and a dedicated range of ports on
the server side. With regular port forwarding you set a forwarding port in NAT to forward a service
(coming in from the server on the WAN) to the IP address of a computer on the client side (LAN).
The problem is that port forwarding only forwards a service to a single LAN IP address. In order to
use the same service on a different LAN computer, you have to manually replace the LAN
computer's IP address in the forwarding port with another LAN computer's IP address.
Trigger port forwarding solves this problem by allowing computers on the LAN to dynamically take
turns using the service. The LTE3301 records the IP address of a LAN computer that sends traffic to
the WAN to request a service with a specific port number and protocol (a "trigger" port). When the
LTE3301's WAN port receives a response with a specific port number and protocol ("incoming"
port), the LTE3301 forwards the traffic to the LAN IP address of the computer that sent the request.
After that computer’s connection for that service closes, another computer on the LAN can use the
service in the same manner. This way you do not need to configure a new IP address each time you
want a different LAN computer to use the application.
10.6.4 Trigger Port Forwarding Example
The following is an example of trigger port forwarding.
LTE3301 Series User’s Guide
95
Chapter 10 NAT
Jane’s computer
Real Audio Server
Port 7070
Figure 61 Trigger Port Forwarding Process: Example
1Jane requests a file from the Real Audio server (port 7070).
2Port 7070 is a “trigger” port and causes the LTE3301 to record Jane’s computer IP address. The
LTE3301 associates Jane's computer IP address with the "incoming" port range of 6970-7170.
3The Real Audio server responds using a port number ranging between 6970-7170.
4The LTE3301 forwards the traffic to Jane’s computer IP address.
5Only Jane can connect to the Real Audio server until the connection is closed or times out. The
LTE3301 times out in three minutes with UDP (User Datagram Protocol), or two hours with TCP/IP
(Transfer Control Protocol/Internet Protocol).
10.6.5 Two Points To Remember About Trigger Ports
1Trigger events only happen on data that is coming from inside the LTE3301 and going to the
outside.
2If an application needs a continuous data stream, that port (range) will be tied up so that another
computer on the LAN can’t trigger it.
LTE3301 Series User’s Guide
96
11.1 Overview
Dynamic Domain Name Service (DDNS) services let you use a fixed domain name with a dynamic
IP address. Users can always use the same domain name instead of a different dynamic IP address
that changes each time to connect to the LTE3301 or a server in your network.
Note: The LTE3301 must have a public global IP address and you should have your
registered DDNS account information on hand.
11.2 General
To change your LTE3301’s DDNS, click Network > DDNS. The screen appears as shown.
CHAPTER 11
DDNS
Figure 62 Dynamic DNS
The following table describes the labels in this screen.
Table 41 Dynamic DNS
LABELDESCRIPTION
IPv4 Dynamic DNS Setup
Dynamic DNSSelect Enable to use dynamic DNS. Select Disable to turn this feature off.
Service ProviderSelect the name of your Dynamic DNS service provider.
LTE3301 Series User’s Guide
97
Chapter 11 DDNS
Table 41 Dynamic DNS (continued)
LABELDESCRIPTION
Host NameThe host name is the domain name that the DDNS service will map to your dynamic
global IP address. Type the host name fully qualified, for example,
“yourhost.mydomain.net”. You can specify up to two host names in the field
separated by a comma (",").
UsernameEnter your user name.
PasswordEnter the password assigned to you.
IPv6 Dynamic DNS Setup
Dynamic DNSSelect Enable to use dynamic DNS. Select Disable to turn this feature off.
Service ProviderSelect the name of your Dynamic DNS service provider.
Host NameThe host name is the domain name that the DDNS service will map to your dynamic
global IP address. Type the host name fully qualified, for example,
“yourhost.mydomain.net”. You can specify up to two host names in the field
separated by a comma (",").
TokenThis is the token authentication provided by the hosting provider (i.e. FreeDDNS).
When the host name is registered, the hosting server provides the token identifier.
ApplyClick Apply to save your changes back to the LTE3301.
CancelClick Cancel to begin configuring this screen afresh.
LTE3301 Series User’s Guide
98
12.1 Overview
WAN
R1
R2
A
R3
LAN
This chapter shows you how to configure static routes for your LTE3301.
The LTE3301 usually uses the default gateway to route outbound traffic from computers on the LAN
to the Internet. To have the LTE3301 send data to devices not reachable through the default
gateway, use static routes.
For example, the next figure shows a computer (A) connected to the LTE3301’s LAN interface. The
LTE3301 routes most traffic from A to the Internet through the LTE3301’s default gateway (R1).
You create one static route to connect to services offered by your ISP behind router R2. You create
another static route to communicate with a separate network behind a router R3 connected to the
LAN.
Figure 63 Example of Static Routing Topology
CHAPTER 12
Routing
12.2 Static Route Screen
Click Network > Routing > Static Route to open the Static Route screen.
LTE3301 Series User’s Guide
99
Chapter 12 Routing
Figure 64 Network > Routing > Static Route
The following table describes the labels in this screen.
Table 42 Network > Routing > Static Route
LABELDESCRIPTION
Add Static RouteClick this to create a new rule.
#This is the number of an individual static route.
StatusThis field indicates whether the rule is active (yellow bulb) or not (gray bulb).
DestinationThis parameter specifies the IP network address of the final destination. Routing is always
Subnet MaskThis parameter specifies the IP network subnet mask of the final destination.
GatewayThis is the IP address of the gateway. The gateway is a router or switch on the same
ModifyClick the Edit icon to open a screen where you can modify an existing rule.
based on network number.
network segment as the device's LAN or WAN port. The gateway helps forward packets to
their destinations.
Click the Delete icon to remove a rule from the LTE3301.
12.2.1 Add/Edit Static Route
Click the Add Static Route button or a rule’s Edit icon in the Static Route screen. Use this screen
to configure the required information for a static route.
Static RouteSelect to enable or disable this rule.
Destination IP
Address
This parameter specifies the IP network address of the final destination. Routing is always
based on network number. If you need to specify a route to a single host, use a subnet
mask of 255.255.255.255 in the subnet mask field to force the network number to be
identical to the host ID.
LTE3301 Series User’s Guide
100
Loading...
+ hidden pages
You need points to download manuals.
1 point = 1 manual.
You can buy points or you can get point for every manual you upload.