Congratulations on your purchase of the ZyXEL MAX-200HW2 Series WiMAX WiFi Router
with Built-In Switch and VOIP. Your ZyXEL Device allows you to access WiMAX wireless
networks, set up a WiFi network and make Voice over Internet (VoIP) phone calls.
Your ZyXEL Device is easy to install and configure.
Intended Audience
This manual is designed to guide you through the configuration of your ZyXEL Device for its
various applications.
Related Documentation
Quick Start Guide
The Quick Start Guide is designed to help you get up and running right away. It contains
information on setting up your network and configuring for Internet access.
Supporting Disk
Refer to the included CD for support documents.
ZyXEL Web Site
Please refer to www.zyxel.com for additional support documentation and product
certifications.
User s Guide Feedback
Help us help you. Send all User!s Guide-related comments, questions or suggestions for
improvement to the following address, or use e-mail instead. Thank you!
The Technical Writing Team,
ZyXEL Communications Corp.,
6 Innovation Road II,
Science-Based Industrial Park,
Hsinchu, 300, Taiwan.
E-mail: techwriters@zyxel.com.tw
MAX-200HW2 Series User s Guide
3
Document Conventions
Warnings and Notes
These are how warnings and notes are shown in this User!s Guide.
Warnings tell you about things that could harm you or your ZyXEL Device.
Notes tell you other important information (for example, other things you may
need to configure or helpful tips) or recommendations.
Syntax Conventions
The ZyXEL MAX-200HW2 Series may be referred to as the "ZyXEL Device#, the
"device#, the "system# or the "product# in this User!s Guide.Product labels, screen names, field labels and field choices are all in bold font.A key stroke is denoted by square brackets and uppercase text, for example, [ENTER]
means the "enter# or "return# key on your keyboard.
"Enter# means for you to type one or more characters and then press the [ENTER] key.
"Select# or "choose# means for you to use one of the predefined choices.A right angle bracket ( > ) within a screen name denotes a mouse click. For example,
Maintenance > Log > Log Setting means you first click Maintenance in the navigation
panel, then the Log sub menu and finally the Log Setting tab to get to that screen.
Units of measurement may denote the "metric# value or the "scientific# value. For
example, "k# for kilo may denote "1000# or "1024#, "M# for mega may denote "1000000#
or "1048576# and so on.
"e.g.,# is a shorthand for "for instance#, and "i.e.,# means "that is# or "in other words#.
Document Conventions
4
Icons Used in Figures
Figures in this User!s Guide may use the following generic icons. The ZyXEL Device icon is
not an exact representation of your ZyXEL Device.
MAX-200HW2 Series User s Guide
Table 1 Common Icons
ZyXEL DeviceComputerNotebook
Wireless SignalWireless Base StationInternet Cloud
RouterServerFirewall
Document Conventions
MAX-200HW2 Series User s Guide
5
Safety Warnings
For your safety, be sure to read and follow all warning notices and instructions.
For your safety, be sure to read and follow all warning notices and instructions.
Do NOT use this product near water, for example, in a wet basement or near a swimming
Do NOT expose your device to dampness, dust or corrosive liquids.Do NOT store things on the device.Do NOT install, use, or service this device during a thunderstorm. There is a remote risk
Connect ONLY suitable accessories to the device.ONLY qualified service personnel should service or disassemble this device. Make sure to connect the cables to the correct ports.Place connecting cables carefully so that no one will step on them or stumble over them.Always disconnect all cables from this device before servicing or disassembling.Use ONLY an appropriate power adaptor or cord for your device.Connect the power adaptor or cord to the right supply voltage (for example, 110V AC in
Do NOT allow anything to rest on the power adaptor or cord and do NOT place the
Do NOT use the device if the power adaptor or cord is damaged as it might cause
If the power adaptor or cord is damaged, remove it from the power outlet.Do NOT attempt to repair the power adaptor or cord. Contact your local vendor to order a
Do not use the device outside, and make sure all the connections are indoors. There is a
Do NOT obstruct the device ventilation slots, as insufficient airflow may harm your
Use only No. 26 AWG (American Wire Gauge) or larger telecommunication line cord.Antenna Warning! This device meets ETSI and FCC certification requirements when
Safety Warnings
pool.
of electric shock from lightning.
North America or 230V AC in Europe).
product where anyone can walk on the power adaptor or cord.
electrocution.
new one.
remote risk of electric shock from lightning.
device.
using the included antenna(s). Only use the included antenna(s).
6
MAX-200HW2 Series User s Guide
This product is recyclable. Dispose of it properly.
Table 138 Commonly Used Services ...................................................................................................333
30
MAX-200HW2 Series User s Guide
PART I
Introduction
Getting Started (33)
Introducing the Web Configurator (39)
31
32
CHAPTER 1
Getting Started
This chapter introduces the main features and applications of the ZyXEL Device.
1.1 About Your ZyXEL Device
The ZyXEL Device is a WiMAX WiFi router with built-in switch and VoIP. It allows you to
access the Internet by connecting to a WiMAX wireless network.
You can create a WiFi network using the Wireless LAN feature.
You can use a traditional analog telephone to make Internet calls using the ZyXEL Device!s
Voice over IP (VoIP) communication capabilities.
You can configure firewall and content filtering for secure Internet access, as well as a host of
other features.
The web browser-based Graphical User Interface (GUI), also known as the web configurator,
provides easy management.
See Chapter 25 on page 269 for a complete list of features for your model.
At the time of writing, this User!s Guide covers the following models:
Table 2 Models Covered
MAX-200HW22.5Ghz
MAX-210HW23.5Ghz
MAX-230HW22.3Ghz
This User!s Guide uses screens and example settings from the MAX-210HW2 model.
1.1.1 Wireless Internet Access
Connect your computer or network to the ZyXEL Device for wireless Internet access. See the
Quick Start Guide for instructions on hardware connection.
In a wireless metropolitan area network (MAN), the ZyXEL Device connects to a base station
(BS) for Internet access.
The following diagram shows a notebook computer equipped with the ZyXEL Device
connecting to the Internet through a base station (marked BS).
MAX-200HW2 Series User s Guide
33
Chapter 1Getting Started
Figure 1 Mobile Station and Base Station
You can also configure firewall and content filtering on the ZyXEL Device for secure Internet
access. When the firewall is on, all incoming traffic from the Internet to your network is
blocked unless it is initiated from your network. This means that probes from the outside to
your network are not allowed, but you can safely browse the Internet and download files.
Use content filtering to block access to web sites with URLs containing keywords that you
specify. You can define time periods and days during which content filtering is enabled and
include or exclude particular computers on your network from content filtering. For example,
you could block access to certain web sites for the kids.
1.1.2 WiFi Network
The ZyXEL Device Wireless LAN feature allows IEEE 802.11b or IEEE 802.11g compatible
wireless clients to access the Internet or the local network as well as to communicate with each
other. Wireless stations can move freely anywhere in the coverage area and use resources on
the wired network.
Figure 2 WLAN Application Example
1.1.3 Make Calls via Internet Telephony Service Provider
In a home or small office environment, you can use the ZyXEL Device to make and receive
the following types of VoIP telephone calls:
Peer-to-Peer calls (A) - Use the ZyXEL Device to make a call to the recipient!s IP address
without using a SIP proxy server.
34
MAX-200HW2 Series User s Guide
Chapter 1Getting Started
Calls via a VoIP service provider (B) - The ZyXEL Device sends your call to a VoIP
service provider!s SIP server which forwards your calls to either VoIP or PSTN phones.
Figure 3 ZyXEL Device s VoIP Features
1.2 ZyXEL Device Hardware
Follow the instructions in the Quick Start Guideto make hardware connections.
1.2.1 LEDs
The following figure shows the LEDs (lights) on the ZyXEL Device.
Figure 4 The ZyXEL Device
The following table describes your ZyXEL Device!s LEDs.
Table 3 The ZyXEL Device
LEDSTATEDESCRIPTION
PWROFFThe ZyXEL Device is not receiving power.
REDThe ZyXEL Device is receiving power but has been unable to start
RED / ORANGE
(BLINKING)
GREENThe ZyXEL Device is receiving power and functioning correctly.
GREEN (BLINKING)The ZyXEL Device is performing a self-test.
up correctly. See the Troubleshooting section for more information.
The ZyXEL Device is starting up.
MAX-200HW2 Series User s Guide
35
Chapter 1Getting Started
Table 3 The ZyXEL Device
LEDSTATEDESCRIPTION
LAN 1 to 4OFFThe LAN is not connected.
GREENThe ZyXEL Device has a successful Local Area Network
GREEN
(BLINKING)
VoIP 1
to 2
LINKOFFThe ZyXEL Device is not connected to a wireless (WiMAX)
WLANOFFThe wireless LAN is not ready or has failed.
SIGNAL
1 ~ 5
OFFNo SIP account is registered, or the ZyXEL Device is not receiving
GREENA SIP account is registered.
GREEN
(BLINKING)
ORANGEA SIP account is registered and has a voice message.
ORANGE
(BLINKING)
GREENThe ZyXEL Device is successfully connected to a wireless
GREEN
(BLINKING SLOWLY)
GREEN
(BLINKING QUICKLY)
GREENThe wireless LAN is active.
GREEN
(BLINKING)
The SIGNAL LEDs display the Received Signal Strength Indication (RSSI) of the wireless
(WiMAX) connection.
NO SIGNAL LEDS ONThere is no wireless connection.
(Ethernet) connection.
Your device is sending/receiving data through the wireless LAN.
power.
A SIP account is registered, and the phone attached to the LINE
port is in use (off the hook).
A SIP account is registered and has a voice message, and the
phone attached to the LINE port is in use (off the hook).
network.
(WiMAX) network.
The ZyXEL Device is searching for a wireless (WiMAX) network.
The ZyXEL Device has found a wireless (WiMAX) network and is
connecting.
The ZyXEL Device is sending/receiving data through the wireless
LAN.
1.2.2 Antennas
If you have a MAX-210HW2 you should have a 2dBi WiFi omni antenna and a 2dBi WiMAX
omni antenna. Connect the WiFi antenna to the SMA connector port labelled WiFi. Connect
the WiMAX antenna to the SMA connector port labelled WiMAX. Make sure you connect the
correct antenna to the correct connector port.
36
SIGNAL 1 ONThe signal strength is less than -80 dBm
SIGNAL 2 ONThe signal strength is between -79 and -70 dBm
SIGNAL 3 ONThe signal strength is between -69 and -60 dBm
SIGNAL 4 ONThe signal strength is between -59 and -50 dBm
SIGNAL 5 ONThe signal strength is more than -50 dBm
MAX-200HW2 Series User s Guide
Chapter 1Getting Started
If you have a MAX-200HW2 or MAX-210HW2 you should have a 2dBi Wifi omni antenna
and a panel directional antenna. Connect the WiFi omni antenna to the connector port labelled
WiFi. Connect the cable to the panel directional antenna and connector port labelled WiMAX.
Make sure you position the panel directional antenna as far away from the device as possible
to minimize interference. See the panel directional antenna documentation on how to set it up.
The MAX-210HW2 is also equipped with one internal 6dBi directional patch antenna for
WiMAX. If your signal strength is poor (use the SIGNAL LEDs to gauge received signal
strength) orient the front of the ZyXEL Device (the side with the LEDs) towards the base
station. If you do not know the location of the base station, experiment with moving the
ZyXEL Device while observing the SIGNAL LEDs.
1.3 Good Habits for Managing the ZyXEL Device
Do the following things regularly to make the ZyXEL Device more secure and to manage the
ZyXEL Device more effectively.
Change the password. Use a password that!s not easy to guess and that consists of
different types of characters, such as numbers and letters.
Write down the password and put it in a safe place.Back up the configuration (and make sure you know how to restore it). Restoring an
earlier working configuration may be useful if the ZyXEL Device becomes unstable or
even crashes. If you forget your password, you will have to reset the ZyXEL Device to its
factory default settings. If you backed up an earlier configuration file, you would not have
to totally re-configure the ZyXEL Device. You could simply restore your last
configuration.
MAX-200HW2 Series User s Guide
37
Chapter 1Getting Started
38
MAX-200HW2 Series User s Guide
CHAPTER 2
Introducing the Web
Configurator
This chapter describes how to access and navigate the web configurator.
2.1 Web Configurator Overview
The web configurator is an HTML-based management interface that allows easy device setup
and management via Internet browser. Use Internet Explorer 6.0 and later or Netscape
Navigator 7.0 and later versions. The recommended screen resolution is 1024 by 768 pixels.
In order to use the web configurator you need to allow:
Web browser pop-up windows from your device. Web pop-up blocking is enabled by
default in Windows XP SP (Service Pack) 2.
JavaScripts (enabled by default).Java permissions (enabled by default).
See the Troubleshooting chapter if you need to make sure these functions are allowed in
Internet Explorer.
2.1.1 Accessing the Web Configurator
1 Make sure your ZyXEL Device hardware is properly connected (refer to the Quick Start
Guide).
2 Launch your web browser.
3 Type "192.168.1.1" as the URL.
4 A password screen displays. The default password ("1234#) displays in non-readable
characters. If you haven!t changed the password yet, you can just click Login. Click
Cancel to revert to the default password in the password field. If you have changed the
password, enter your password and click Login.
MAX-200HW2 Series User s Guide
39
Chapter 2Introducing the Web Configurator
Figure 5 Password Screen
5 The following screen displays if you have not yet changed your password. It is highly
recommended you change the default password. Enter a new password, retype it to
confirm and click Apply; alternatively click Ignore to proceed to the main menu if you
do not want to change the password now.
Figure 6 Change Password Screen
40
6 Click Apply in the next screen to create a certificate using your ZyXEL Device!s MAC
address that will be specific to this device. This certificate is used for authentication
when using a secure HTTPS connection over the Internet.
Figure 7 Replace Certificate Screen
MAX-200HW2 Series User s Guide
Chapter 2Introducing the Web Configurator
7 A screen displays to let you choose whether to go to the wizard or the advanced screens.
Click Go to Wizard setup if you are logging in for the first time or if you want to make
basic changes. The wizard selection screen appears after you click Apply. See Chapter 4
on page 61 for more information.
Click Go to Advanced setup if you want to configure features that are not available in the
wizards. The main screen appears after you click Apply. See Section 2.2 on page 42 for
more information.
Click Exit if you want to log out.
For security reasons, by default the ZyXEL Device automatically logs you out if
you do not use the web configurator for five minutes. If this happens, log in
again.
Figure 8 Wizard or Advanced Screen
2.1.2 The RESET Button
If you forget your password or cannot access the web configurator, you will need to use the
RESET button to reload the factory-default configuration file. This means that you will lose
all configurations that you had previously and the password will be reset to "1234#.
2.1.2.1 Using The Reset Button
1 Make sure the POWER light is on (not blinking).
2 To set the device back to the factory default settings, press the RESET button for ten
seconds or until the POWER light begins to blink and then release it. When the
POWER light begins to blink, the defaults have been restored and the device restarts.
3 Reconfigure the ZyXEL Device, following the steps in your Quick Start Guide.
MAX-200HW2 Series User s Guide
41
Chapter 2Introducing the Web Configurator
A
2.2 Web Configurator Main Screen
Figure 9 Main Screen
B
As illustrated above, the main screen is divided into these parts:
A - title barB - navigation panelC - main windowD - status bar
2.2.1 Title Bar
The title bar provides some icons in the upper right corner.
C
D
42
MAX-200HW2 Series User s Guide
Chapter 2Introducing the Web Configurator
The icons have the following functions.
Table 4 Web Configurator Icons in the Title Bar
ICON DESCRIPTION
Wizards: Click this icon to go to the configuration wizards. See Chapter 4 on page
61 for more information.
Logout: Click this icon to log out of the web configurator.
2.2.2 Navigation Panel
Use the menu items on the navigation panel to open screens to configure ZyXEL Device
features. The following table describes the menu items.
Table 5 Navigation Panel Summary
LINKTABFUNCTION
StatusThis screen contains administrative and system-related information.
Network
Wireless LANGeneralUse this screen to enable Wireless LAN and configure WiFi security.
OTISTUse this screen to enable OTIST.
MAC FilterUse this screen to configure the MAC address filtering options.
AdvancedUse this screen to set the 802.11 mode.
WANInternet
Connection
WiMAX
Frequency
AdvancedUse this screen to configure DNS servers, RIP & Multicast, and Windows
Traffic RedirectUse this screen to configure your traffic redirect properties
Antenna
Selection
LANIPUse this screen to configure LAN TCP/IP settings.
DHCP SetupUse this screen to configure LAN DHCP and DNS settings.
Static DHCPUse this screen to always assign specific IP addresses to individual MAC
Client ListUse this screen to view current DHCP client information.
IP AliasUse this screen to partition your LAN interface into subnets.
AdvancedUse this screen to configure RIP and Multicast setup settings.
NATGeneralUse this screen to enable NAT.
Port ForwardingUse this screen to make your localservers visible to the outside world.
Trigger PortUse this screen to set port triggering rules.
ALGUse this screen to configure Application Level Gateway settings.
Use this screen to configure ISP parameters, WAN IP address assignment
and other advanced properties.
Use this screen to set the radio frequencies the ZyXEL Device searches for
a WiMAX connection.
networking settings.
Use this screen to choose which antenna (external or internal) you want the
ZyXEL Device to use.
addresses.
MAX-200HW2 Series User s Guide
43
Chapter 2Introducing the Web Configurator
Table 5 Navigation Panel Summary
LINKTABFUNCTION
VPN TransportGeneralUse the General screen to turn VPN transport on or off, and to set the VPN
Customer
Interface
Ethernet
Pseudowire
StatisticsUse this screen to view details and performance information of each active
VoIP
SIPSIP SettingsUse this screen to configure your ZyXEL Device s Voice over IP settings.
QoSUse this screen to configure your ZyXEL Device s Quality of Service
PhoneAnalog PhoneUse this screen to set which SIP account to use for outgoing or incoming
CommonUse this screen to configure general phone settings.
RegionUse this screen to select your location and call service mode.
Phone BookIncoming Call
Policy
Speed DialUse this screen to configure speed dial for SIP phone numbers that you call
Security
FirewallGeneralUse this screen to activate/deactivate the firewall and the default action to
ServicesUse this screen to set the days and times for your device to perform service
CertificatesMy CertificatesUse this screen to generate and export self-signed certificates or
Trusted CAsUse this screen to save CA certificates and trusted remote host certificates
Content FilterFilterUse this screen to block sites containing certain keywords in the URL,
ScheduleUse this screen to set the days and times for your ZyXEL Device to perform
Management
Static RouteIP Static RouteUse this screen to configure IP static routes to tell your device about
transport endpoint (your service provider s router).
Use this screen to configure the VPNs used by the ZyXEL Device.
Use this screen to configure Ethernet pseudowires. Each Ethernet
pseudowire mimics a regular wired Ethernet connection, transporting VPLS
data over the WiMAX network.
customer interface and its associated Ethernet pseudowire.
settings for VoIP.
calls.
Use this screen to configure call-forwarding.
often.
take on network traffic going in specific directions.
blocking.
certification requests and import the ZyXEL Device s CA-signed certificates.
to the ZyXEL Device.
exclude a range of users on the LAN from content filtering on your ZyXEL
Device and restrict certain web features.
content filtering.
networks beyond the directly connected remote nodes.
44
MAX-200HW2 Series User s Guide
Chapter 2Introducing the Web Configurator
Table 5 Navigation Panel Summary
LINKTABFUNCTION
Remote MGMT WWWUse this screen to configure through which interface(s) and from which IP
TelnetUse this screen to configure through which interface(s) and from which IP
FTPUse this screen to configure through which interface(s) and from which IP
SNMPUse this screen to configure your ZyXEL Device s settings for Simple
DNSUse this screen to configure through which interface(s) and from which IP
SecurityUse this screen to set whether or not your device will respond to pings and
UPnPGeneralUse this screen to turn UPnP on or off.
Maintenance
SystemGeneralThis screen contains administrative and system-related information and
Dynamic DNSUse this screen to set up Dynamic DNS.
Time SettingUse this screen to change your ZyXEL Device s time and date.
LogsView LogUse this screen to display your device s logs.
Log SettingsUse this screen to select which logs and/or immediate alerts your device is
ToolsFirmwareUse this screen to upload firmware to your device.
ConfigurationUse this screen to backup and restore your device s configuration (settings)
RestartThis screen allows you to reboot the ZyXEL Device without turning the
address(es) users can use HTTP to manage the ZyXEL Device.
address(es) users can use Telnet to manage the ZyXEL Device.
address(es) users can use FTP to access the ZyXEL Device.
Network Management Protocol management.
address(es) users can send DNS queries to the ZyXEL Device.
probes for services that you have not made available.
also allows you to change your password.
to record. You can also set it to e-mail the logs to you.
or reset the factory default settings.
power off.
2.2.3 Main Window
The main window displays information and configuration fields. It is discussed in the rest of
this document.
Right after you log in, the Status screen is displayed. See Chapter 6 on page 79 for more
information about the Status screen.
2.2.4 Status Bar
Check the status bar when you click Apply or OK to verify that the configuration has been
updated.
MAX-200HW2 Series User s Guide
45
Chapter 2Introducing the Web Configurator
46
MAX-200HW2 Series User s Guide
PART II
Tutorials and Wizard
Tutorial (49)
Internet Setup Wizard (61)
VoIP Wizard (73)
47
48
CHAPTER 3
Tutorial
This chapter provides examples showing how to use the ZyXEL Device to access the Internet,
set up a WiFi network, set up VoIP and make a telephone call over the Internet using the
ZyXEL Device!s speed dial feature.
3.1 Connect to the Internet
This section shows how to set up your Internet access details on the ZyXEL Device and
configure your WiMAX frequency settings. See Section 8.2 on page 107 for more information
on how WiMAX works.
3.1.1 Configure Internet Access Settings
To access the Internet, you need information from your Internet Service Provider (ISP) about
your account and the network. In this example, your ISP has given you the following
information.
Table 6 Example Internet Access Information
UsernameUser1234
Password4321
CertificateIncluded on CD
Authentication
Type
TTLS Inner EAP
mode
TTLS
CHAP
The information provided by your ISP may be quite different from this example
information. When you enter user information, always enter the information
supplied by your service provider and leave other fields at their defaults.
Your ISP has also told you that you will be assigned a dynamic IP address each time you
connect to the Internet. See Section 8.3 on page 108 for more details about dynamic and static
IP addresses.
MAX-200HW2 Series User s Guide
49
Chapter 3Tutorial
Once you have connected the ZyXEL Device to your computer and accessed the Web
Configurator (see the Quick Start Guide for details) follow the steps below to connect to a
network.
1 First, install your security certificate. In the Web Configurator, click Security >
Figure 10 Tutorial: Security
2 Click the Trusted CAs tab.
Figure 11 Tutorial: Trusted CAs Tab
Certificates.
3 The following screen displays. This is where you can choose a security certificate for the
ZyXEL Device to use.
Figure 12 Tutorial: Trusted CAs Screen
4 Click Import, then click Browse in the screen that appears. Browse to the location of
your certificate (on the CD from your ISP in this example) and click Open.
5 The certificate!s location displays in the File Path field. Click Apply. The Trusted CAs
screen displays again, showing the certificate!s details in the Trusted CA Certificates
section. You have successfully uploaded your certificate!
6 Next, configure your Internet access settings. In the Web Configurator, click Network >
WAN in the navigation panel.
50
MAX-200HW2 Series User s Guide
Chapter 3Tutorial
Figure 13 Tutorial: Network
7 The following screen displays. This screen is where you enter your Internet access
details.
Not all fields are available in all ZyXEL Devices.
Figure 14 Tutorial: Internet Access Settings
In the ISP Parameters for Internet Access area, enter your username ($User1234!) in
the User field, and enter your password ($4321!) in the Password field. Select TTLS
from the Authentication list, and select CHAP from the TTLS Inner EAP list. Leave
PKM at its default.
In the WAN IP Address Assignment area, make sure that Get Automatically from ISP (Default) is selected. Leave all other fields at their default values.
MAX-200HW2 Series User s Guide
51
Chapter 3Tutorial
8 Click Apply. Your Internet access settings are saved to the ZyXEL Device, and are used
automatically each time you connect to the Internet.
3.1.2 Configure WiMAX Settings
The WiMAX Frequency screen allows you to specify a set of frequencies to search for a
connection to a base station. Before you start, you need information from your ISP about the
supported frequencies.
In this example, your ISP has told you that the supported WiMAX frequencies are at 2.55 and
2.56 Gigahertz (GHz). See Section 8.4 on page 111 for more information on radio frequencies.
Follow the steps below to configure your frequency settings.
1 Click Network > WAN > WiMAX Frequency to open the screen shown next.
Figure 15 Tutorial: WiMAX Frequency Setup
52
2 Enter the frequency settings your ISP gave you in the DL Frequency fields. Note that
these fields are in kilohertz (kHz).
2.55 GHz is equal to 2550000 kHz, so enter 2550000 in the DL Frequency [1] field.
2.56 GHz is equal to 2560000 kHZ, so enter 2560000 in the DL Frequency [2] field.
3 Click Apply to save your settings. The ZyXEL Device scans for an available wireless
connection at the DL Frequency [1] setting (2.55 GHz) and, if it does not find an
available connection, searches at the DL Frequency [2] setting (2.56 GHz). When it
finds an available connection, the fields in this screen will be automatically set to use
that frequency.
For an example of using the WiMAX Frequency screen to configure more frequencies,
see Section 8.4.2.1 on page 113.
4 Look at the LEDs on your ZyXEL Device. When the ZyXEL Device successfully
connects to a base station, the LINK LED shines green steadily. The SIGNAL 1 ~ 5
LEDs indicate the signal strength, with SIGNAL 5 showing a very strong signal and
SIGNAL 1 showing a very weak signal.
5 Open your Internet browser and enter http://www.zyxel.com or the URL of any other
web site in the address bar. If you are able to access the web site, your wireless
MAX-200HW2 Series User s Guide
connection is successfully configured. If you cannot access the web site, check the
Troubleshooting section of this User's Guide.
3.2 Set Up a WiFi Network
SSIDSSID_Example3
Channel6
Security WPA-PSK
(Pre-Shared Key: ThisismyWPA-PSKpre-sharedkey)
802.11 modeIEEE 802.11b/g
An access point (AP) or wireless router is referred to as an "AP# and a computer with a
wireless network card or USB/PCI adapter is referred to as a "wireless client# here.
We use the M-302 utility screens as an example for the wireless client. The screens may vary
for different models.
3.2.1 Configuring the AP (Your ZyXEL Device)
Chapter 3Tutorial
Follow the steps below to configure the wireless settings on your ZyXEL Device.
1 Open the Wireless LAN > General screen in the ZyXEL Device!s web configurator.
Figure 16 Network > Wireless LAN > General
2 Make sure the Enable Wireless LAN check box is selected.
3 Enter SSID_Example3 as the SSID and select a channel.
4 Set security mode to WPA-PSK and enter ThisismyWPA-PSKpre-sharedkey in the
Pre-Shared Key field. Click Apply.
5 Open the Status screen.Verify your wireless and wireless security settings under Device
Information.
MAX-200HW2 Series User s Guide
53
Chapter 3Tutorial
Figure 17 Network > Wireless LAN > Device Information
6 Check if the WLAN connection is up under Interface Status.
Figure 18 Network > Wireless LAN > Interface Status
3.3 Connect to the WiFi Network
This section describes how to connect the wireless client to your WiFi network.
54
MAX-200HW2 Series User s Guide
3.3.1 Connecting to a Wireless LAN
The following sections show you how to join a wireless network using the ZyXEL utility, as in
the following diagram. The wireless client is labelled C and the access point is labelled AP.
There are three ways to connect the client to an access point.
Configure nothing and leave the wireless client to automatically scan for and connect to
any available network that has no wireless security configured.
Manually connect to a network.Configure a profile to have the wireless client automatically connect to a specific network
or peer computer.
This example illustrates how to manually connect your wireless client to an access point (AP)
which is configured for WPA-PSK security and connected to the Internet. Before you connect
to the access point, you must know its Service Set IDentity (SSID) and WPA-PSK pre-shared
key. In this example, the SSID is "SSID_Example3# and the pre-shared key is
"ThisismyWPA-PSKpre-sharedkey#.
After you install the ZyXEL utility and then insert the wireless client, follow the steps below
to connect to a network using the Site Survey screen.
1 Open the ZyXEL utility and click the Site Survey tab to open the screen shown next.
Chapter 3Tutorial
2 The wireless client automatically searches for available wireless networks. Click Scan if
you want to search again. If no entry displays in the Available Network List, that means
there is no wireless network available within range. Make sure the AP or peer computer
is turned on or move the wireless client closer to the AP or peer computer.
3 When you try to connect to an AP with security configured, a window will pop up
prompting you to specify the security settings. Enter the pre-shared key and leave the
encryption type at the default setting.
Use the Next button to move on to the next screen. You can use the Back button at any
time to return to the previous screen, or the Exit button to return to the Site Survey
screen.
MAX-200HW2 Series User s Guide
55
Chapter 3Tutorial
Figure 19 ZyXEL Utility: Security Settings
4 The Confirm Save window appears. Check your settings and click Save to continue.
Figure 20 ZyXEL Utility: Confirm Save
5 The ZyXEL utility returns to the Link Info screen while it connects to the wireless
network using your settings. When the wireless link is established, the ZyXEL utility
icon in the system tray turns green and the Link Info screen displays details of the active
connection. Check the network information in the Link Info screen to verify that you
have successfully connected to the selected network. If the wireless client is not
connected to a network, the fields in this screen remain blank.
Figure 21 ZyXEL Utility: Link Info
6 Open your Internet browser and enter http://www.zyxel.com or the URL of any other
web site in the address bar. If you are able to access the web site, your wireless
connection is successfully configured.
56
MAX-200HW2 Series User s Guide
If you cannot access the web site, try changing the encryption type in the Security
Settings screen, check the Troubleshooting section of this User's Guide or contact your
network administrator.
3.4 Make a Telephone Call Over the Internet
To make a call over the Internet using the ZyXEL Device, first do the following things:
Set up hardware connections from the ZyXEL Device to your computer, your telephone
and the power supply (see the Quick Start Guide for more details on hardware
connections).
Set up your Internet access and WiMAX settings on the ZyXEL Device (see Section 3.1.1
on page 49 and Section 3.1.2 on page 52 for examples).
Set up an account with a Voice over IP (VoIP) provider. This account (called a SIP
account) allows you to make calls over the Internet. See Chapter 12 on page 149 for more
information on SIP accounts.
Use the sections below to set up your SIP account and speed dialing, and place a VoIP call.
3.4.1 Configure Your SIP Account
Your ZyXEL Device needs to be configured with the details of your SIP account before you
can use it to make calls over the Internet. In this example, your SIP identity is
"id123@abcvoip.com#, your user name is "id123# and your password is "zyx987#. Your VoIP
provider has told you that the SIP server address is "sipserver-abcvoip.com#. See Section
12.1.3 on page 149 for more information on SIP identities.
Once you have connected the ZyXEL Device to your computer and accessed the Web
Configurator (see the Quick Start Guide for details) follow the steps below to configure your
SIP settings.
1 In the Web Configurator, click VoIP > SIP in the navigation panel.
The following screen displays. This screen is where you enter your SIP account details.
Chapter 3Tutorial
MAX-200HW2 Series User s Guide
57
Chapter 3Tutorial
Figure 22 Tutorial: SIP Account Setup
2 Select SIP1 from the SIP Account list and make sure that the Active SIP Account box
3 Enter your SIP user name ($id123!) in the Number field.
4 Enter your VoIP provider!s SIP server name ($sipserver-abcvoip.com!) in the SIP Server
5 In the Authentication area, enter $id123! in the User Name field, and $zyx987! in the
6 Click on the Status button in the navigation panel to check that your SIP account is
is selected.
Address field. As your VoIP provider did not give you a different REGISTER Server
Address, enter $sipserver-abcvoip.com! again.
Enter your VoIP provider!s domain name ($abcvoip.com!) in the SIP Service Domain
field.
Password field. Leave the SIP Local Port, SIP Server Port and REGISTER Server
Port fields at their default values, as your VoIP provider did not supply port details.
Click Apply.
correctly registered.
Look in the VoIP Status area towards the bottom of the Status screen. If the SIP 1
account displays Registered in the Registration field, it is ready to use.
If the Registration field for the SIP 1 account displays Register Fail or Inactive, click
the Register button, check your settings in the VoIP > SIP screen or contact your VoIP
provider to confirm that you have the correct settings and that your account is active.
3.4.2 Configure a Phone
Once you have set up your SIP account, click VoIP > Phone > Analog Phone in the
navigation panel. The following screen displays.
58
MAX-200HW2 Series User s Guide
Chapter 3Tutorial
Figure 23 Tutorial: the Analog Phone Screen
Use this screen to make sure that the phone connected to your ZyXEL Device uses the correct
SIP account.
1 Select Phone1 from the drop-down list box.
2 In the Outgoing Call Use area, select SIP1.
3 In the Incoming Call apply to area, select both SIP1 and SIP2.
4 Click Apply. Your analog phone settings are saved.
3.4.3 Set Up Speed Dialing and Make a Call
In this example you want to set up speed dialling to make calls to a friend, Bob, whose SIP
account number is 2345@xyzvoip.com. Your voIP provider, abcvoip.com, has told you that to
call an xyzvoip.com number you must add $555! at its start.
Different VoIP providers implement calls to other networks in different ways.
Check with your provider for details.
To configure speed dialling on the ZyXEL Device, click VoIP > Phone Book > Speed Dial.
The following screen displays.
MAX-200HW2 Series User s Guide
59
Chapter 3Tutorial
Figure 24 Tutorial: the Speed Dial Screen
Use the following steps to set up a speed dial entry.
1 You can have up to ten speed dial rules. Select the rule number (1, in this example) from
2 In the Number field, enter "5552345# and in the Name field enter "Bob#. Under Type,
the Speed Dial drop-down list box.
select Use Proxy and click Add.
The new speed dial rule is displayed in the Speed Dial Phone book List.
Figure 25 Tutorial: New Speed Dial Rule
Use the following steps to call a number from the speed dial list.
1 Ensure that your phone is correctly connected to the ZyXEL Device. See the Quick Start
Guide for details of hardware connections.
2 Lift the phone!s receiver and type the speed dial number exactly as it appears in the
Speed Dial Phone Book list. In this case, Bob!s phone number occupies rule #01, so dial
"#01# on the phone!s keypad to make the call.
60
MAX-200HW2 Series User s Guide
CHAPTER 4
Internet Setup Wizard
This chapter provides information on the wizard setup screens for Internet access.
4.1 Wizard Setup Overview
The wizard will guide you through several steps. You will need to enter some information for
identification purposes, then the wizard will guide you through configuring your Internet
settings.
4.2 Internet Connection Wizard Setup
1 After you enter the password to access the web configurator, select Go to Wizard setup.
Otherwise, click the wizard icon () in the top right corner of the web configuratorto
go to the wizards.
Figure 26 Select a Mode
2 Click CONNECTION WIZARD to configure the system for Internet access.
3 The following screen displays. Click Next to continue. Click Back at any time to return
to the previous screen, or Exit to leave the wizard setup.
MAX-200HW2 Series User s Guide
61
Chapter 4Internet Setup Wizard
Figure 27 Connection Wizard: Introduction
4.3 Step One: System Information
In the next screen you can give your ZyXEL Device a name (optional) in the System Name
field. Enter up to thirty letters (this field is case-sensitive) or numbers. The $at! symbol (@),
dash (-), underscore (_) and period (.) are also permitted. Enter your ISP!s IP address in the Domain Name field if your ISP has instructed you to do so, or if you are having trouble
accessing the Internet. Otherwise, leave this field blank. Click Next.
Figure 28 Wizard > Step 1 > System Information
62
The following table describes the labels in this screen.
Table 7 Wizard > Step 1 > System Information
LABELDESCRIPTION
System Name System Name is a unique name to identify the ZyXEL Device in an Ethernet network.
Enter a descriptive name. This name can be up to 30 alphanumeric characters long.
Spaces are not allowed, but dashes "-" and underscores "_" are accepted.
Domain Name Type the domain name (if you know it) here. If you leave this field blank, the ISP may
assign a domain name via DHCP. The domain name entered by you is given priority
over the ISP assigned domain name.
BackClick Back to display the previous screen.
NextClick Next to proceed to the next screen.
ExitClick Exit to close the wizard screen without saving.
MAX-200HW2 Series User s Guide
4.4 Step Two: Wireless LAN Wizard
Set up your wireless LAN using the following screens.
4.4.1 Wireless LAN Screen
Figure 29 Wizard > Step 2 > Wireless LAN
The following table describes the labels in this screen.
Table 8 Wizard > Step 2 > Wireless LAN
LABELDESCRIPTION
Name (SSID)Enter a descriptive name (up to 32 printable 7-bit ASCII characters) for the wireless
SecuritySelect a Security level from the drop-down list box.
Channel
Selection
BackClick Back to display the previous screen.
NextClick Next to proceed to the next screen.
ExitClick Exit to close the wizard screen without saving.
LAN.
If you change this field on the ZyXEL Device, make sure all wireless stations use the
same SSID in order to access the network.
Choose Auto to have the ZyXEL Device generate a pre-shared key automatically. If
you choose this option go directly to Section 4.4.4 on page 65.
Choose None to have no wireless LAN security configured. If you do not enable any
wireless security on your ZyXEL Device, your network is accessible to any wireless
networking device that is within range. If you choose this option, skip directly to
Section 4.4.4 on page 65.
Choose Basic (WEP) security if you want to configure WEP Encryption parameters. If
you choose this option, go directly to Section 4.4.2 on page 64.
Choose Extend (WPA-PSK or WPA2-PSK) security to configure a Pre-Shared Key.
Choose this option only if your wireless clients support WPA-PSK or WPA2-PSK
respectively. If you choose this option, skip directly to Section 4.4.3 on page 65.
The range of radio frequencies used by IEEE 802.11b/g wireless devices is called a
channel. Click the Scan button to have the ZyXEL Device automatically select a
channel.
Chapter 4Internet Setup Wizard
MAX-200HW2 Series User s Guide
63
Chapter 4Internet Setup Wizard
The ZyXEL Device and other wireless devices must use the same SSID,
channel ID and WEP encryption key (if WEP is enabled), WPA-PSK (if WPAPSK is enabled) or WPA2-PSK (if WPA2-PSK is enabled) for wireless
communication.
4.4.2 Basic (WEP) Security
Choose Basic (WEP) to set up WEP Encryption parameters.
Figure 30 Wizard > Step 2 > Basic (WEP) Security
64
The following table describes the labels in this screen.
Table 9 Wizard > Step 2 > Basic (WEP) Security
LABELDESCRIPTION
PassphraseType a Passphrase (up to 32 printable characters) and click Generate. The ZyXEL
WEP
Encryption
Device automatically generates a WEP key.
Select 64-bit WEP or 128-bit WEP to allow data encryption.
ASCII Select this option in order to enter ASCII characters as the WEP keys. ASCII
characters include the characters available on a standard English language keyboard.
HEX Select this option to enter hexadecimal characters as the WEP keys.
The preceding !0x" is entered automatically.
MAX-200HW2 Series User s Guide
Table 9 Wizard > Step 2 > Basic (WEP) Security
LABELDESCRIPTION
Key 1 to Key 4 The WEP keys are used to encrypt data. Both the ZyXEL Device and the wireless
stations must use the same WEP key for data transmission.
If you chose 64-bit WEP, then enter any 5 ASCII characters or 10 hexadecimal
characters ("0-9", "A-F").
If you chose 128-bit WEP, then enter 13 ASCII characters or 26 hexadecimal
characters ("0-9", "A-F").
You must configure at least one key, only one key can be activated at any one time.
The default key is key 1.
BackClick Back to display the previous screen.
NextClick Next to proceed to the next screen. Proceed to Section 4.4.4 on page 65.
ExitClick Exit to close the wizard screen without saving.
4.4.3 Extend (WPA-PSK or WPA2-PSK) Security
Choose Extend (WPA-PSK) or Extend (WPA2-PSK) security in the Wireless LAN setup
screen to set up a Pre-Shared Key.
NextClick Next to proceed to the next screen. Proceed to
ExitClick Exit to close the wizard screen without saving.
Type from 8 to 63 case-sensitive ASCII characters. You can set up the most secure
wireless connection by configuring WPA in the wireless LAN screens. You need to
configure an authentication server to do this.
4.4.4 The OTIST Screen
After configuring your security settings or choosing Auto or None the OTIST screen will
display.
You mustenable OTIST if you have selected Auto. For the other security types you may click
No if you do not plan to use OTIST. OTIST is only compatible with certain wireless devices,
please check your other device!s documentation to see if it supports OTIST. For more
information on OTIST see Section 7.4 on page 101.
MAX-200HW2 Series User s Guide
65
Chapter 4Internet Setup Wizard
Note: The text in the screen below may be different depending on your chosen security
settings.
Figure 32 Wizard > Step 2 > OTIST
The following table describes the labels in this screen.
Table 11 Wizard > Step 2 > OTIST
LABELDESCRIPTION
Enable OTIST Select Yes to enable OTIST. Select No to not use OTIST.
Setup KeyIf you select Yes then type an OTIST Setup Key of exactly eight ASCII characters in
BackClick Back to display the previous screen.
NextClick Next to proceed to the next screen. Proceed to Section 4.5 on page 66
ExitClick Exit to close the wizard screen without saving.
length.
4.5 Step Three: Internet Configuration
Set up your Internet access using the following screens.
4.5.1 Connection Type Screen
Leave the Connection Type at the default setting WIMAX and click Next.
66
MAX-200HW2 Series User s Guide
Figure 33 Wizard > Step 3 > Connection Type Screen
4.5.2 ISP Parameters for Internet Access Screen
Enter your Internet account information (username and password) exactly as provided by your
ISP. Leave the fields for which you were not given information at their default settings. Click
Next to continue.
Figure 34 Wizard > Step 3 > ISP Parameters for Internet Access Screen
Chapter 4Internet Setup Wizard
The following table describes the labels in this screen.
Table 12 Wizard > Step 3 > ISP Parameters for Internet Access Screen
LABELDESCRIPTION
ISP Parameters for Internet
Access
UserUse this field to enter the username associated with your Internet
PasswordUse this field to enter the password associated with your Internet
MAX-200HW2 Series User s Guide
access account. You can enter up to 61 printable ASCII characters.
access account. You can enter up to 47 printable ASCII characters.
67
Chapter 4Internet Setup Wizard
Table 12 Wizard > Step 3 > ISP Parameters for Internet Access Screen
LABELDESCRIPTION
Anonymous IdentityEnter the anonymous identity provided by your Internet Service
PKMThis field displays the Privacy Key Management version number.
AuthenticationThis field displays the user authentication method. Authentication is
TTLS Inner EAPThis field displays the type of secondary authentication method. Once
Auth ModeSelect the authentication mode from the drop-down list box.
CertificateThis is the security certificate the ZyXEL Device uses to authenticate
BackClick Back to display the previous screen.
NextClick Next to proceed to the next screen.
ExitClick Exit to close the wizard screen without saving.
Provider. Anonymous identity (also known as outer identity) is used
with EAP-TTLS encryption. The anonymous identity is used to route
your authentication request to the correct authentication server, and
does not reveal your real user name. Your real user name and
password are encrypted in the TLS tunnel, and only the anonymous
identity can be seen.
Leave this field blank if your ISP did not give you an anonymous
identity to use.
PKM provides security between the ZyXEL Device and the base
station. At the time of writing, the ZyXEL Device supports PKMv2
only. See the WiMAX security appendix for more information.
the process of confirming the identity of a mobile station (by means of
a username and password, for example).
Check with your service provider if you are unsure of the correct
setting for your account.
Choose from the following user authentication methods:
#TTLS (Tunnelled Transport Layer Security)
#TLS (Transport Layer Security)
Note: Not all ZyXEL Devices support TLS authentication.
Check with your service provider for details.
a secure EAP-TTLS connection is established, the inner EAP is the
protocol used to exchange security information between the mobile
station, the base station and the AAA server to authenticate the
mobile station. See the WiMAX security appendix for more details.
The ZyXEL Device supports the following inner authentication types:
#CHAP (Challenge Handshake Authentication Protocol)
#MSCHAP (Microsoft CHAP)
#MSCHAPV2 (Microsoft CHAP version 2)
#PAP (Password Authentication Protocol)
This field is not available in all ZyXEL Devices. Check with your
service provider for details.
The ZyXEL Device supports the following authentication modes:
#User Only
#Device Only with Cert
#Certs and User Authentication
the AAA server. Use the Security > Certificates > Trusted CA
screen to import certificates to the ZyXEL Device.
4.5.3 Antenna Selection Screen
If you have the MAX-210HW2 you can choose to use the internal antenna or external antenna
for WiMAX. The internal antenna is fixed, and the external antenna is removable.
68
MAX-200HW2 Series User s Guide
Chapter 4Internet Setup Wizard
In the screen that appears, you can select which antenna to use. Select Automatic Selection to
have the ZyXEL Device use whichever antenna has the best reception (recommended).
Alternatively, if you do not want to use the external antenna, select Use Internal Antenna,
and if you do not want to use the internal antenna, select Use External Antenna. Click Next.
The MAX-200HW2 and MAX-230HW2 do not have an internal antenna.
Figure 35 Wizard > Step 3 > Antenna Selection
The following table describes the labels in this screen.
Table 13 Wizard > Step 3 > Antenna Selection
LABELDESCRIPTION
Automatic SelectionSelect Automatic Selection to have the ZyXEL Device choose which
Use Internal AntennaSelect Use Internal Antenna to have the ZyXEL Device use it s
Use External AntennaSelect Use External Antenna to have the ZyXEL Device use it s
BackClick Back to display the previous screen.
NextClick Next to proceed to the next screen.
ExitClick Exit to close the wizard screen without saving.
4.5.4 IP Address Screen
A fixed IP address is a static IP that your ISP gives you. An automatic (dynamic) IP address is
not fixed; the ISP assigns you a different one each time you connect to the Internet.
In the following screen, select Use fixed IP address provided by your ISP if your ISP gave
you an IP address to use.Otherwise, select Get automatically from your ISP.
antenna to use. This setting is recommend as it will choose the
antenna with the best signal to the base station.
internal antenna. This option is not applicable for the MAX-200HW2
and MAX-230HW2.
external antenna.
MAX-200HW2 Series User s Guide
69
Chapter 4Internet Setup Wizard
Figure 36 Wizard > Step 3 > IP Address
The following table describes the labels in this screen.
Table 14 Wizard > Step 3 > IP Address
LABELDESCRIPTION
Your IP Address
Get automatically from ISP
(Default)
Use Fixed IP Address
provided by your ISP
BackClick Back to display the previous screen.
NextClick Next to proceed to the next screen.
ExitClick Exit to close the wizard screen without saving.
Select this if you have a dynamic IP address. A dynamic IP address is
not fixed; the ISP assigns you a different one each time you connect
to the Internet.
A static IP address is a fixed IP that your ISP gives you.
4.5.5 WAN IP Address Assignment
If you selected Get automatically from your ISP in the previous screen, skip this step. If you
selected Use fixed IP address provided by your ISP, the following screen appears.
Enter your IP address, subnet mask, gateway address and DNS details exactly as they were
given to you by your ISP.
70
MAX-200HW2 Series User s Guide
Chapter 4Internet Setup Wizard
Figure 37 Wizard > Step 3 > WAN IP Address Assignment
The following table describes the labels in this screen.
Table 15 Wizard > Step 3 > WAN IP Address Assignment
LABELDESCRIPTION
WAN IP Address Assignment
My WAN IP AddressType your ISP assigned IP address in this field.
My WAN IP Subnet MaskEnter a subnet mask in dotted decimal notation.
Refer to the appendicesto calculate a subnet mask If you are
implementing subnetting.
Gateway IP AddressSpecify a gateway IP address (supplied by your ISP).
DNS Server Address
Assignment
First, Second and Third
DNS Server
BackClick Back to display the previous screen.
NextClick Next to proceed to the next screen.
ExitClick Exit to close the wizard screen without saving.
Enter the DNS server's IP address in the field(s). Leave the IP
address set to 0.0.0.0 to ignore the field.
4.5.6 Wizard Complete
Click Finish to complete and save the Connection Wizard settings.
MAX-200HW2 Series User s Guide
71
Chapter 4Internet Setup Wizard
Figure 38 The Connection Wizard: Congratulations
Launch your web browser and navigate to www.zyxel.com. Internet access is just the
beginning. Refer to the rest of this guide for more detailed information on the complete range
of ZyXEL Device features. If you cannot access the Internet, open the web configurator again
to confirm that the Internet settings you configured in the wizard setup are correct.
72
MAX-200HW2 Series User s Guide
CHAPTER 5
VoIP Wizard
This chapter shows you how to use the wizard to set up your SIP account(s).
5.1 Introduction
The ZyXEL Device has Voice over IP (VoIP) communication capabilities that allow you to use
a traditional analog telephone to make Internet calls. You can configure the ZyXEL Device to
use up to two SIP based VoIP accounts.
5.2 VOIP Wizard Setup
1 After you enter the password to access the web configurator, select Go to Wizard setup.
Otherwise, click the wizard icon ( ) in the top right corner of the web configuratorto
display the wizard main screen. Click VOIP SETUP to configure the system for Voice
Over Internet connection.
Figure 39 Select a Mode
2 The following screen displays. This wizard screen allows you to configure your voice
settings for SIP account 1. Fill in the fields with information from your VoIP service
provider. Leave the default settings in fields for which no information was provided
(except if otherwise specified). See Chapter 12 on page 149 for background information
on these fields.
MAX-200HW2 Series User s Guide
73
Chapter 5VoIP Wizard
Figure 40 VOIP Wizard: Configuration
The following table describes the labels in this screen
Table 16 VOIP Wizard Configuration
LABELDESCRIPTION
SIP NumberEnter your SIP number in this field (use the number or text that comes
SIP Server AddressType the IP address or domain name of the SIP server in this field. It
SIP Service DomainEnter the SIP service domain name in this field (the domain name that
User NameThis is the user name for registering this SIP account with the SIP register
PasswordType the password associated with the user name above. You can use up
Check here to set up
SIP2 settings.
BackClick Back to return to the previous screen.
ApplyClick Apply to complete the wizard setup and save your configuration.
ExitClick Exit to close the wizard without saving your settings.
before the @ symbol in a SIP account like 1234@VoIP-provider.com).
You can use up to 127 ASCII characters.
doesn t matter whether the SIP server is a proxy, redirect or register
server. You can use up to 95 ASCII characters.
comes after the @ symbol in a SIP account like 1234@VoIP-
provider.com). You can use up to 127 ASCII Extended set characters.
server. Type the user name exactly as it was given to you. You can use up
to 95 ASCII characters.
to 95 ASCII Extended set characters.
This screen configures SIP account 1. Select the check box if you have
a second SIP account that you want to use. You will need to configure
the same fields for the second SIP account.
74
3 The ZyXEL Device attempts to register your SIP account with the SIP server.
MAX-200HW2 Series User s Guide
Chapter 5VoIP Wizard
Figure 41 VoIP Wizard: SIP Registration Test
4 This screen displays if SIP account registration fails. Check your WiMAX connection
using the LINK and SIGNAL LEDs on the front of the ZyXEL Device. Then wait a few
seconds and click Register Again. If your Internet connection was already working, you
can click Back and try re-entering your SIP account settings.
Figure 42 VoIP Wizard: Fail
5 This screen displays if your SIP account registration was successful. Click Return to
Wizard Main Page if you want to use another configuration wizard. Click Go to
Advanced Setup page or Finish to close the wizard and go to the main web
configurator screens.
Figure 43 VOIP Wizard: Finish
MAX-200HW2 Series User s Guide
75
Chapter 5VoIP Wizard
76
MAX-200HW2 Series User s Guide
PART III
Web Configurator
Status Screens (79)
Network
Wireless LAN (91)
WAN Setup (107)
LAN (119)
NAT (129)
VPN Transport (137)
VoIP
SIP (149)
Phone (165)
Phone Book (173)
Security
Firewall (179)
Certificates (187)
Content Filter (205)
Management
Static Route (209)
Remote MGMT (213)
UPnP (221)
Maintenance
System (233)
Logs (241)
Tools (255)
77
78
CHAPTER 6
Status Screens
Use the Status screens to look at the current status of the device, system resources, interfaces
(LAN, WAN and WLAN), and SIP accounts. You can also register and unregister SIP
accounts. The Status screen also provides detailed information from DHCP and statistics from
WiMAX, VoIP, bandwidth management, and traffic.
6.1 Status Screen
Click Status to open this screen.
Figure 44 Status Screen
MAX-200HW2 Series User s Guide
79
Chapter 6Status Screens
Each field is described in the following table.
Table 17 Status Screen
LABELDESCRIPTION
Refresh IntervalSelect how often you want the ZyXEL Device to update this screen.
Refresh NowClick this to update this screen immediately.
Device
Information
System NameThis field displays the ZyXEL Device system name. It is used for identification. You
Firmware
Version
WAN Information
IP AddressThis field displays the current IP address of the ZyXEL Device in the WAN.
IP Subnet
Mask
DHCPThis field displays what DHCP services the ZyXEL Device is using in the WAN.
LAN Information
IP AddressThis field displays the current IP address of the ZyXEL Device in the LAN.
IP Subnet
Mask
DHCPThis field displays what DHCP services the ZyXEL Device is providing to the LAN.
WLAN
Information
Name (SSID)This is the descriptive name used to identify the ZyXEL Device in the wireless
ChannelThis is the channel number used by the ZyXEL Device.
Security Mode This is the WiFi security mode used by the ZyXEL Device.
WiMAX
Information
Operator IDEvery WiMAX service provider has a unique Operator ID number, which is
can change this in the Maintenance > System > General screen s System Name
field.
This field displays the current version of the firmware inside the device. It also
shows the date the firmware version was created. You can change the firmware
version by uploading new firmware in Maintenance > Tools > Firmware.
This field displays the current subnet mask on the WAN.
Choices are:
Client - The ZyXEL Device is a DHCP client in the WAN. Its IP address comes
from a DHCP server on the WAN.
None - The ZyXEL Device is not using any DHCP services in the WAN. It has a
static IP address.
If you are not using Roadrunner on Ethernet, you can change this in Network >
WAN. If you are using Roadrunner on Ethernet, this is controlled by Roadrunner.
This field displays the current subnet mask in the LAN.
Choices are:
Server - The ZyXEL Device is a DHCP server in the LAN. It assigns IP addresses
to other computers in the LAN.
Relay - The ZyXEL Device is routing DHCP requests to one or more DHCP
servers. The DHCP server(s) may be on another network.
None - The ZyXEL Device is not providing any DHCP services to the LAN.
You can change this in Network > LAN > DHCP Setup.
LAN.
broadcast by each base station it owns. You can only connect to the Internet
through base stations belonging to your service provider s network.
80
MAX-200HW2 Series User s Guide
Chapter 6Status Screens
Table 17 Status Screen
LABELDESCRIPTION
BSIDThis field displays the identification number of the wireless base station to which
Cell IDA base station s coverage area can be divided into multiple cells. This field shows
FrequencyThis field displays the radio frequency of the ZyXEL Device s wireless connection
MAC addressThis field displays the Media Access Control address of the ZyXEL Device. Every
WiMAX StateThis field displays the status of the ZyXEL Device s current connection.
BandwidthThis field shows the size of the bandwidth step the ZyXEL Device uses to connect
CINR meanThis field shows the average Carrier to Interference plus Noise Ratio of the current
CINR
deviation
RSSIThis field shows the Received Signal Strength Indication. This value is a
UL Data RateThis field shows the number of data packets uploaded from the ZyXEL Device to
DL Data RateThis field shows the number of data packets downloaded to the ZyXEL Device
the ZyXEL Device is connected. Every base station transmits a unique BSID,
which identifies it across the network.
the identification number of the cell in which the ZyXEL Device is connected.
to a base station.
network device has a unique MAC address which identifies it across the network.
#NA: the ZyXEL Device is starting up.
#Fail: The ZyXEL Device is unable to connect to a base station.
#Initial Synchronization: the ZyXEL Device is attempting to locate a base
station.
#Initial DCD (Downlink Channel Descriptor): the ZyXEL Device has located a
base station and is receiving information about a possible downlink
connection.
#Initial UCD (Uplink Channel Descriptor): the ZyXEL Device is receiving
information from the base station about a possible uplink connection.
#Initial Ranging and Calibration: the ZyXEL Device and the base station are
transmitting and receiving information about the distance between them.
Ranging allows the ZyXEL Device to use a lower transmission power level
when communicating with a nearby base station, and a higher transmission
power level when communicating with a distant base station.
#Initial Negotiation: the ZyXEL Device and the base station are exchanging
information about their capabilities.
#Initial PKM (Privacy Key Management): the ZyXEL Device and the base
station are exchanging security information.
#Initial Registration: the ZyXEL Device is registering with a RADIUS server.
#Running: the ZyXEL Device has successfully registered with the base station.
Traffic can now flow between the ZyXEL Device and the base station.
#Sleep: the ZyXEL Device is in power saving mode, but periodically checks
whether a base station has traffic waiting.
#Idle: the ZyXEL Device is in power saving mode, but can connect when a base
station alerts it that there is traffic waiting.
#Handover: the ZyXEL Device is moving from one coverage area to another,
and is connecting to the new base station.
to a base station in megahertz (MHz).
connection. This value is an indication of overall radio signal quality. A higher
value indicates a higher signal quality, and a lower value indicates a lower signal
quality.
This field shows the amount of change in the CINR level. This value is an
indication of radio signal stability. A lower number indicates a more stable signal,
and a higher number indicates a less stable signal.
measurement of overall radio signal strength. A higher RSSI level indicates a
stronger signal, and a lower RSSI level indicates a weaker signal.
A strong signal does not necessarily indicate a good signal: a strong signal may
have a low signal-to-noise ratio (SNR).
the base station each second.
from the base station each second.
MAX-200HW2 Series User s Guide
81
Chapter 6Status Screens
Table 17 Status Screen
LABELDESCRIPTION
PERThis field shows the Packet Error Rate. The PER is the percentage of data
Tx PowerThis field shows the output transmission (Tx) level of the ZyXEL Device.
Firmware
Version
Site
Information
ProfileClick the Details... link to view details of the current wireless security settings.
System Status
System Up
Time
Current Date/
Time
CPU UsageThis field displays what percentage of the ZyXEL Device s processing ability is
Memory
Usage
IVR UsageThis field displays what percentage of the ZyXEL Device s IVR memory is
Interface Status
InterfaceThis column displays each interface of the ZyXEL Device.
StatusThis field indicates whether or not the ZyXEL Device is using the interface.
RateFor the LAN ports this displays the port speed and duplex setting.
Summary
Packet
Statistics
packets transmitted across the network but not successfully received.
This shows the WiMAX chipset firmware version.
Click the Details... link to view details of the radio frequencies used by the ZyXEL
Device to connect to a base station.
This field displays how long the ZyXEL Device has been running since it last
started up. The ZyXEL Device starts up when you plug it in, when you restart it
(Maintenance > Tools > Restart), or when you reset it (see Section 2.1.2 on page
41).
This field displays the current date and time in the ZyXEL Device. You can change
this in Maintenance > System > Time Setting.
currently being used. The higher the CPU usage, the more likely the ZyXEL
Device is to slow down. You can reduce this by disabling some services, such as
DHCP, NAT, or content filtering.
This field displays what percentage of the ZyXEL Device s memory is currently
used. The higher the memory usage, the more likely the ZyXEL Device is to slow
down. Some memory is required just to start the ZyXEL Device and to run the web
configurator. You can reduce the memory usage by disabling some services (see
CPU Usage); by reducing the amount of memory allocated to NAT and firewall
rules (you may have to reduce the number of NAT rules or firewall rules to do so);
or by deleting rules in functions such as incoming call policies, speed dial entries,
and static routes.
currently used. IVR (Interactive Voice Response) refers to the customizable ring
tone and on-hold music you set. See Section 12.1.11 on page 155 for more
information.
For the WAN interface, this field displays Up when the ZyXEL Device is connected
to a WiMAX network, and Down when the ZyXEL Device is not connected to a
WiMAX network.
For the LAN interface, this field displays Up when the ZyXEL Device is using the
interface and Down when the ZyXEL Device is not using the interface.
For the WLAN port, it displays Up when WLAN is enabled or Down when WLAN is
disabled.
For the WAN interface, it displays the downstream and upstream transmission rate
or N/A if the ZyXEL Device is not connected to a base station.
For the WLAN port, it displays the transmission rate when WLAN is enabled or N/A when WLAN is disabled.
Click this link to view port status and packet specific statistics.
82
MAX-200HW2 Series User s Guide
Chapter 6Status Screens
Table 17 Status Screen
LABELDESCRIPTION
DHCP TableClick this link to see details of computers to which the ZyXEL Device has given an
VoIP StatisticsClick this link to view statistics about your VoIP usage.
VoIP Status
AccountThis column displays each SIP account in the ZyXEL Device.
RegistrationThis field displays the current registration status of the SIP account. You have to
URIThis field displays the account number and service domain of the SIP account.
IP address.
register SIP accounts with a SIP server to use VoIP.
If the SIP account is already registered with the SIP server,
Click Unregister to delete the SIP account s registration in the SIP server. This
does not cancel your SIP account, but it deletes the mapping between your SIP
identity and your IP address or domain name.
The second field displays Registered.
If the SIP account is not registered with the SIP server,
Click Register to have the ZyXEL Device attempt to register the SIP account with
the SIP server.
The second field displays the reason the account is not registered.
Inactive - The SIP account is not active. You can activate it in VoIP > SIP > SIP
Settings.
Register Fail - The last time the ZyXEL Device tried to register the SIP account
with the SIP server, the attempt failed. The ZyXEL Device automatically tries to
register the SIP account when you turn on the ZyXEL Device or when you activate
it.
You can change these in VoIP > SIP > SIP Settings.
6.2 Site Information
Click Status > Site Information to view this screen. This read-only screen shows information
about the ZyXEL Device!s connection with a WiMAX base station. To configure these
settings, go to the Network > WAN > WiMAX Frequency screen.
Figure 45 The Site Information Screen
MAX-200HW2 Series User s Guide
83
Chapter 6Status Screens
The following table describes the labels in this screen.
Table 18 The Site Information Screen
LABELDESCRIPTION
Site Information
DL Frequency
[0] ~ [9]
6.3 Profile
Click Status > Profile to view this screen. This read-only screen displays information about
the security settings you are using. To configure these settings, go to the Network > WAN > Internet Connection screen.
Not all ZyXEL Device models have all the fields shown here.
Figure 46 The WiMAX Profile Screen
These fields show the downlink frequency settings in kilohertz (kHz). These
settings determine how the ZyXEL Device searches for an available wireless
connection. See Section 8.4 on page 111 for more information.
84
The following table describes the labels in this screen.
Table 19 The WiMAX Profile Screen
LABELDESCRIPTION
Profile
UserThis is the username for your Internet access account.
PasswordThis is the password for your Internet access account. The password
displays as a row of asterisks.
Anonymous IdentityThis is the anonymous identity provided by your Internet Service Provider.
Anonymous identity (also known as outer identity) is used with EAP-TTLS
encryption.
PKMThis field displays the Privacy Key Management version number. PKM
provides security between the ZyXEL Device and the base station. See the
WiMAX security appendix for more information.
MAX-200HW2 Series User s Guide
Chapter 6Status Screens
Table 19 The WiMAX Profile Screen
LABELDESCRIPTION
AuthenticationThis field displays the user authentication method. Authentication is the
TTLS Inner EAPThis field displays the type of secondary authentication method. Once a
Auth ModeThis is the authentication mode. The ZyXEL Device supports the following
CertificateThis is the security certificate the ZyXEL Device uses to authenticate the
process of confirming the identity of a user (by means of a username and
password, for example).
EAP-TTLS allows an MS/SS and a base station to establish a secure link (or
$tunnel ) with an AAA (Authentication, Authorization and Accounting) server
in order to exchange authentication information. See the WiMAX security
appendix for more details.
secure EAP-TTLS connection is established, the inner EAP is the protocol
used to exchange security information between the mobile station, the base
station and the AAA server to authenticate the mobile station. See the
WiMAX security appendix for more details.
The ZyXEL Device supports the following inner authentication types:
#CHAP (Challenge Handshake Authentication Protocol)
#MSCHAP (Microsoft CHAP)
#MSCHAPV2 (Microsoft CHAP version 2)
#PAP (Password Authentication Protocol)
authentication modes:
#User Only
#Device Only with Cert
#Certs and User Authentication
AAA server.
6.4 Packet Statistics
To access this screen, open the Status screen (see Section 6.1 on page 79), and click
(Details...) next to Packet Statistics. Read-only information here includes port status and packet specific statistics. Also provided are "system up time" and "poll interval(s)". The Poll
Interval(s) field is configurable.
Figure 47 Packet Statistics
MAX-200HW2 Series User s Guide
85
Chapter 6Status Screens
The following table describes the fields in this screen.
Table 20 Packet Statistics
LABELDESCRIPTION
Packet Statistics
PortThis column displays each interface of the ZyXEL Device.
Status This field indicates whether or not the ZyXEL Device is using the interface.
TxPkts This field displays the number of packets transmitted on this interface.
RxPkts This field displays the number of packets received on this interface.
CollisionsThis field displays the number of collisions on this port.
Tx B/s This field displays the number of bytes transmitted in the last second.
Rx B/sThis field displays the number of bytes received in the last second.
Up Time This field displays the elapsed time this interface has been connected.
System up TimeThis is the elapsed time the system has been on.
Poll Interval(s)Type the time interval for the browser to refresh system statistics.
Set IntervalClick this button to apply the new poll interval you entered in the Poll Interval
StopClick this button to halt the refreshing of the system statistics.
For the WAN interface, this field displays Up when the ZyXEL Device is
connected to a WiMAX network, and Down when the ZyXEL Device is not
connected to a WiMAX network.
For the LAN interface, this field displays Up when the ZyXEL Device is using the
interface and Down when the ZyXEL Device is not using the interface.
For the WLAN port, it displays Up when WLAN is enabled or Down when WLAN
is disabled.
field above.
6.5 DHCP Table Screen
This screen displays information about computers that received an IP address from the ZyXEL
Device. To access this screen, open the Status screen (see Section 6.1 on page 79), and click
(Details...) next to DHCP Table.
Figure 48 DHCP Table
86
MAX-200HW2 Series User s Guide
Each field is described in the following table.
Table 21 DHCP Table
LABELDESCRIPTION
DHCP Table
#This field is a sequential value. It is not associated with a specific entry.
IP AddressThis field displays the IP address the ZyXEL Device assigned to a computer in
the network.
Host NameThis field displays the system name of the computer to which the ZyXEL Device
assigned the IP address.
MAC AddressThis field displays the MAC address of the computer to which the ZyXEL
Device assigned the IP address.
RefreshClick this to update this screen.
6.6 VoIP Statistics Window
This screen displays SIP registration information, status of calls and VoIP traffic statistics. To
access this screen, open the Status screen (see Section 6.1 on page 79), and click (Details...)
next to VoIP Statistics.
Figure 49 VoIP Statistics
Chapter 6Status Screens
Each field is described in the following table.
Table 22 VoIP Statistics
LABELDESCRIPTION
SIP Status
AccountThis column displays each SIP account in the ZyXEL Device.
MAX-200HW2 Series User s Guide
87
Chapter 6Status Screens
Table 22 VoIP Statistics
LABELDESCRIPTION
RegistrationThis field displays the current registration status of the SIP account. You can
Last RegistrationThis field displays the last time you successfully registered the SIP account. It
URIThis field displays the account number and service domain of the SIP account.
ProtocolThis field displays the transport protocol the SIP account uses. SIP accounts
Message WaitingThis field indicates whether or not there are any messages waiting for the SIP
Last Incoming
Number
Last Outgoing
Number
Call Statistics
PhoneThis field displays the ZyXEL Device s phone port number.
HookThis field indicates whether the phone is on the hook or off the hook.
StatusThis field displays the current state of the phone call.
CodecThis field displays what voice codec is being used for a current VoIP call through a
Peer NumberThis field displays the SIP number of the party that is currently engaged in a VoIP
DurationThis field displays how long the current call has lasted.
Tx PktsThis field displays the number of packets the ZyXEL Device has transmitted in the
Rx PktsThis field displays the number of packets the ZyXEL Device has received in the
Tx B/sThis field displays how quickly the ZyXEL Device has transmitted packets in the
Rx B/sThis field displays how quickly the ZyXEL Device has received packets in the
change this in the Status screen.
Registered - The SIP account is registered with a SIP server.
Register Fail - The last time the ZyXEL Device tried to register the SIP account
with the SIP server, the attempt failed. The ZyXEL Device automatically tries to
register the SIP account when you turn on the ZyXEL Device or when you activate
it.
Inactive - The SIP account is not active. You can activate it in VoIP > SIP > SIP
Settings.
displays N/A if you never successfully registered this account.
You can change these in VoIP > SIP > SIP Settings.
always use UDP.
account.
This field displays the last number that called the SIP account. It displays N/A if no
number has ever dialed the SIP account.
This field displays the last number the SIP account called. It displays N/A if the
SIP account has never dialed a number.
On - The phone is hanging up or already hung up.
Off - The phone is dialing, calling, or connected.
N/A - There are no current VoIP calls, incoming calls or outgoing calls being
made.
DIAL - The callee s phone is ringing.
RING - The phone is ringing for an incoming VoIP call.
Process - There is a VoIP call in progress.
DISC - The callee s line is busy, the callee hung up or your phone was left off the
hook.
phone port.
call through a phone port.
current call.
current call.
current call. The rate is the average number of bytes transmitted per second.
current call. The rate is the average number of bytes transmitted per second.
88
MAX-200HW2 Series User s Guide
Chapter 6Status Screens
Table 22 VoIP Statistics
LABELDESCRIPTION
Poll Interval(s)Enter how often you want the ZyXEL Device to update this screen, and click Set
Set IntervalClick this to make the ZyXEL Device update the screen based on the amount of
StopClick this to make the ZyXEL Device stop updating the screen.
Interval.
time you specified in Poll Interval.
MAX-200HW2 Series User s Guide
89
Chapter 6Status Screens
90
MAX-200HW2 Series User s Guide
CHAPTER 7
Wireless LAN
This chapter discusses how to configure the wireless network settings in your ZyXEL Device.
See the appendices for more detailed information about wireless networks.
7.1 Wireless Network Overview
The following figure provides an example of a wireless network.
Figure 50 Example of a Wireless Network
The wireless network is the part in the blue circle. In this wireless network, devices A and B
are called wireless clients. The wireless clients use the access point (AP) to interact with other
devices (such as the printer) or with the Internet. Your ZyXEL Device is the AP.
Every wireless network must follow these basic guidelines.
Every wireless client in the same wireless network must use the same SSID.
The SSID is the name of the wireless network. It stands for Service Set IDentity.
If two wireless networks overlap, they should use different channels.
Like radio stations or television channels, each wireless network uses a specific channel,
or frequency, to send and receive information.
MAX-200HW2 User s Guide
91
Chapter 7Wireless LAN
Every wireless client in the same wireless network must use security compatible with the
AP.
Security stops unauthorized devices from using the wireless network. It can also protect
the information that is sent in the wireless network.
7.2 Wireless Security Overview
The following sections introduce different types of wireless security you can set up in the
wireless network.
7.2.1 SSID
Normally, the AP acts like a beacon and regularly broadcasts the SSID in the area. You can
hide the SSID instead, in which case the AP does not broadcast the SSID. In addition, you
should change the default SSID to something that is difficult to guess.
This type of security is fairly weak, however, because there are ways for unauthorized devices
to get the SSID. In addition, unauthorized devices can still see the information that is sent in
the wireless network.
7.2.2 MAC Address Filter
Every wireless client has a unique identification number, called a MAC address.1 A MAC
address is usually written using twelve hexadecimal characters2; for example, 00A0C5000002
or 00:A0:C5:00:00:02. To get the MAC address for each wireless client, see the appropriate
User!s Guide or other documentation.
You can use the MAC address filter to tell the AP which wireless clients are allowed or not
allowed to use the wireless network. If a wireless client is allowed to use the wireless network,
it still has to have the correct settings (SSID, channel, and security). If a wireless client is not
allowed to use the wireless network, it does not matter if it has the correct settings.
This type of security does not protect the information that is sent in the wireless network.
Furthermore, there are ways for unauthorized devices to get the MAC address of an authorized
wireless client. Then, they can use that MAC address to use the wireless network.
7.2.3 User Authentication
You can make every user log in to the wireless network before they can use it. This is called
user authentication. However, every wireless client in the wireless network has to support
IEEE 802.1x to do this.
For wireless networks, there are two typical places to store the user names and passwords for
each user.
In the AP: this feature is called a local user database or a local database.In a RADIUS server: this is a server used in businesses more than in homes.
1.Some wireless devices, such as scanners, can detect wireless networks but cannot use wireless networks.
These kinds of wireless devices might not have MAC addresses.
2.Hexadecimal characters are 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, A, B, C, D, E, and F.
92
MAX-200HW2 User s Guide
If your AP does not provide a local user database and if you do not have a RADIUS server,
you cannot set up user names and passwords for your users.
Unauthorized devices can still see the information that is sent in the wireless network, even if
they cannot use the wireless network. Furthermore, there are ways for unauthorized wireless
users to get a valid user name and password. Then, they can use that user name and password
to use the wireless network.
Local user databases also have an additional limitation that is explained in the next section.
7.2.4 Encryption
Wireless networks can use encryption to protect the information that is sent in the wireless
network. Encryption is like a secret code. If you do not know the secret code, you cannot
understand the message.
The types of encryption you can choose depend on the type of user authentication. (See
Section 7.2.3 on page 92 for information about this.)
Table 23 Types of Encryption for Each Type of Authentication
WeakestNo SecurityWPA
StrongestWPA2-PSKWPA2
Chapter 7Wireless LAN
NO AUTHENTICATIONRADIUS SERVER
Static WEP
WPA-PSK
For example, if the wireless network has a RADIUS server, you can choose WPA or WPA2. If
users do not log in to the wireless network, you can choose no encryption, Static WEP, WPA-PSK, or WPA2-PSK.
Usually, you should set up the strongest encryption that every wireless client in the wireless
network supports. For example, suppose the AP does not have a local user database, and you
do not have a RADIUS server. Therefore, there is no user authentication. Suppose the wireless
network has two wireless clients. Device A only supports WEP, and device B supports WEP
and WPA. Therefore, you should set up Static WEP in the wireless network.
It is recommended that wireless networks use WPA-PSK, WPA , or stronger
encryption. IEEE 802.1x and WEP encryption are better than none at all, but it
is still possible for unauthorized devices to figure out the original information
pretty quickly.
It is not possible to use WPA-PSK, WPA or stronger encryption with a local
user database. In this case, it is better to set up stronger encryption with no
authentication than to set up weaker encryption with the local user database.
MAX-200HW2 User s Guide
93
Chapter 7Wireless LAN
When you select WPA2 or WPA2-PSK in your ZyXEL Device, you can also select an option
(WPA Compatible) to support WPA as well. In this case, if some wireless clients support
WPA and some support WPA2, you should set up WPA2-PSK or WPA2 (depending on the
type of wireless network login) and select the WPA Compatible option in the ZyXEL Device.
Many types of encryption use a key to protect the information in the wireless network. The
longer the key, the stronger the encryption. Every wireless client in the wireless network must
have the same key.
With ZyXEL!s OTIST, you set up the SSID and WPA-PSK on the ZyXEL Device. Then, the
ZyXEL Device transfers them to the devices in the wireless networks. As a result, you do not
have to set up the SSID and encryption on every device in the wireless network.
The devices in the wireless network have to support OTIST, and they have to be in range of the
ZyXEL Device when you activate it. See Section 7.4 on page 101 for more details.
7.3 General Wireless LAN Screen
If you are configuring the ZyXEL Device from a computer connected to the
wireless LAN and you change the ZyXEL Device s SSID, channel or security
settings, you will lose your wireless connection when you press Apply to
confirm. You must then change the wireless settings of your computer to
match the ZyXEL Device s new settings.
Click Network > Wireless LAN to open the General screen.
Figure 51 Network > Wireless LAN > General
94
MAX-200HW2 User s Guide
The following table describes the general wireless LAN labels in this screen.
Table 24 Network > Wireless LAN > General
LABELDESCRIPTION
Enable
Wireless LAN
Name(SSID)(Service Set IDentity) The SSID identifies the Service Set with which a wireless
Hide SSIDSelect this check box to hide the SSID in the outgoing beacon frame so a station
Channel
Selection
ApplyClick Apply to save your changes back to the ZyXEL Device.
ResetClick Reset to reload the previous configuration for this screen.
See the rest of this chapter for information on the other labels in this screen.
7.3.1 No Security
Chapter 7Wireless LAN
Click the check box to activate wireless LAN.
station is associated. Wireless stations associating to the access point (AP) must
have the same SSID. Enter a descriptive name (up to 32 printable 7-bit ASCII
characters) for the wireless LAN.
cannot obtain the SSID through scanning using a site survey tool.
Set the operating frequency/channel depending on your particular region.
Select a channel from the drop-down list box. The options vary depending on
whether you are using A or B/G frequency band and the country you are in.
Refer to the Connection Wizard chapter for more information on channels.
Select No Security to allow wireless stations to communicate with the access points without
any data encryption.
If you do not enable any wireless security on your ZyXEL Device, your network
is accessible to any wireless networking device that is within range.
Figure 52 Network > Wireless LAN > General: No Security
MAX-200HW2 User s Guide
95
Chapter 7Wireless LAN
The following table describes the labels in this screen.
Table 25 Wireless No Security
LABELDESCRIPTION
Security ModeChoose No Security from the drop-down list box.
ApplyClick Apply to save your changes back to the ZyXEL Device.
ResetClick Reset to reload the previous configuration for this screen.
7.3.2 WEP Encryption
WEP encryption scrambles the data transmitted between the wireless stations and the access
points to keep network communications private. It encrypts unicast and multicast
communications in a network. Both the wireless stations and the access points must use the
same WEP key.
Your ZyXEL Device allows you to configure up to four 64-bit or 128-bit WEP keys but only
one key can be enabled at any one time.
In order to configure and enable WEP encryption; click Network > Wireless LAN to display
the General screen. Select Static WEP from the Security Mode list.
Figure 53 Network > Wireless LAN > General: Static WEP
96
MAX-200HW2 User s Guide
Chapter 7Wireless LAN
The following table describes the wireless LAN security labels in this screen.
Table 26 Network > Wireless LAN > General: Static WEP
LABELDESCRIPTION
PassphraseEnter a passphrase (password phrase) of up to 32 printable characters and click
WEP
Encryption
Authentication
Method
ASCIISelect this option in order to enter ASCII characters as WEP key.
HexSelect this option in order to enter hexadecimal characters as a WEP key.
Key 1 to Key 4 The WEP keys are used to encrypt data. Both the ZyXEL Device and the wireless
ApplyClick Apply to save your changes back to the ZyXEL Device.
ResetClick Reset to reload the previous configuration for this screen.
Generate. The ZyXEL Device automatically generates four different WEP keys and
displays them in the Key fields below.
Select 64-bit WEP or 128-bit WEP to enable data encryption.
This field is activated when you select 64-bit WEP or 128-bit WEP in the WEP Encryption field.
Select Auto, Open System or Shared Key from the drop-down list box.
The preceding "0x", that identifies a hexadecimal key, is entered automatically.
stations must use the same WEP key for data transmission.
If you chose 64-bit WEP, then enter any 5 ASCII characters or 10 hexadecimal
characters ("0-9", "A-F").
If you chose 128-bit WEP, then enter 13 ASCII characters or 26 hexadecimal
characters ("0-9", "A-F").
You must configure at least one key, only one key can be activated at any one time.
The default key is key 1.
7.3.3 WPA-PSK/WPA2-PSK
Click Network > Wireless LAN to display the General screen. Select WPA-PSK or WPA2PSK from the Security Mode list.
MAX-200HW2 User s Guide
97
Chapter 7Wireless LAN
Figure 54 Network > Wireless LAN > General: WPA-PSK/WPA2-PSK
The following table describes the labels in this screen.
Table 27 Network > Wireless LAN > General: WPA-PSK/WPA2-PSK
LABELDESCRIPTION
WPA CompatibleThis check box is available only when you select WPA2-PSK or WPA2 in the
Pre-Shared Key The encryption mechanisms used for WPA/WPA2 and WPA-PSK/WPA2-PSK are
ReAuthentication
Timer (in
seconds)
Security Mode field.
Select the check box to have both WPA2 and WPA wireless clients be able to
communicate with the ZyXEL Device even when the ZyXEL Device is using
WPA2-PSK or WPA2.
the same. The only difference between the two is that WPA-PSK/WPA2-PSK uses
a simple common password, instead of user-specific credentials.
Type a pre-shared key from 8 to 63 case-sensitive ASCII characters (including
spaces and symbols).
Specify how often wireless stations have to resend usernames and passwords in
order to stay connected. Enter a time interval between 10 and 9999 seconds. The
default time interval is 1800 seconds (30 minutes).
98
Note: If wireless station authentication is done using a RADIUS
server, the reauthentication timer on the RADIUS server has
priority.
Idle TimeoutThe ZyXEL Device automatically disconnects a wireless station from the wired
Group Key
Update Timer
network after a period of inactivity. The wireless station needs to enter the
username and password again before access to the wired network is allowed. The
default time interval is 3600 seconds (or 1 hour).
The Group Key Update Timer is the rate at which the AP (if using WPA-PSK/WPA2-PSK key management) or RADIUSserver (if using WPA/WPA2 key
management) sends a new group key out to all clients. The re-keying process is
the WPA/WPA2 equivalent of automatically changing the WEP key for an AP and
all stations in a WLAN on a periodic basis. Setting of the Group Key Update Timer is also supported in WPA-PSK/WPA2-PSK mode. The default is 1800
seconds (30 minutes).
MAX-200HW2 User s Guide
Table 27 Network > Wireless LAN > General: WPA-PSK/WPA2-PSK
LABELDESCRIPTION
ApplyClick Apply to save your changes back to the ZyXEL Device.
ResetClick Reset to reload the previous configuration for this screen.
7.3.4 WPA/WPA2
Click Network > Wireless LAN to display the General screen. Select WPA or WPA2 from
the Security Mode list.
Figure 55 Network > Wireless LAN > General: WPA/WPA2
Chapter 7Wireless LAN
MAX-200HW2 User s Guide
99
Chapter 7Wireless LAN
The following table describes the labels in this screen.
Table 28 Network > Wireless LAN > General: WPA/WPA2
LABELDESCRIPTION
WPA CompatibleThis check box is available only when you select WPA2-PSK or WPA2 in the
ReAuthentication
Timer (in seconds)
Idle TimeoutThe ZyXEL Device automatically disconnects a wireless station from the wired
Group Key Update
Timer
Authentication Server
IP AddressEnter the IP address of the external authentication server in dotted decimal
Port NumberEnter the port number of the external authentication server. The default port
Shared SecretEnter a password (up to 31 alphanumeric characters) as the key to be shared
Accounting Server
ActiveSelect the checkbox to enable user accounting through an external
IP AddressEnter the IP address of the external accounting server in dotted decimal notation.
Port NumberEnter the port number of the external accounting server. The default port number
Shared SecretEnter a password (up to 31 alphanumeric characters) as the key to be shared
ApplyClick Apply to save your changes back to the ZyXEL Device.
ResetClick Reset to reload the previous configuration for this screen.
Security Mode field.
Select the check box to have both WPA2 and WPA wireless clients be able to
communicate with the ZyXEL Device even when the ZyXEL Device is using
WPA2-PSK or WPA2.
Specify how often wireless stations have to resend usernames and passwords in
order to stay connected. Enter a time interval between 10 and 9999 seconds.
The default time interval is 1800 seconds (30 minutes).
Note: If wireless station authentication is done using a RADIUS
server, the reauthentication timer on the RADIUS server
has priority.
network after a period of inactivity. The wireless station needs to enter the
username and password again before access to the wired network is allowed.
The default time interval is 3600 seconds (or 1 hour).
The Group Key Update Timer is the rate at which the AP (if using WPA-PSK/WPA2-PSK key management) or RADIUSserver (if using WPA/WPA2 key
management) sends a new group key out to all clients. The re-keying process is
the WPA/WPA2 equivalent of automatically changing the WEP key for an AP and
all stations in a WLAN on a periodic basis. Setting of the Group Key Update Timer is also supported in WPA-PSK/WPA2-PSK mode. The ZyXEL Device
default is 1800 seconds (30 minutes).
notation.
number is 1812.
You need not change this value unless your network administrator instructs you
to do so with additional information.
between the external authentication server and the ZyXEL Device.
The key must be the same on the external authentication server and your ZyXEL
Device. The key is not sent over the network.
authentication server.
is 1813.
You need not change this value unless your network administrator instructs you
to do so with additional information.
between the external accounting server and the ZyXEL Device.
The key must be the same on the external accounting server and your ZyXEL
Device. The key is not sent over the network.
100
MAX-200HW2 User s Guide
7.4 OTIST
In a wireless network, the wireless clients must have the same SSID and security settings as
the access point (AP) or wireless router (we will refer to both as "AP# here) in order to
associate with it. Traditionally this meant that you had to configure the settings on the AP and
then manually configure the exact same settings on each wireless client.
OTIST (One-Touch Intelligent Security Technology) allows you to transfer your AP!s SSID
and WPA-PSK security settings to wireless clients that support OTIST and are within
transmission range. You can also choose to have OTIST generate a WPA-PSK key for you if
you didn!t configure one manually.
OTIST replaces the pre-configured wireless settings on the wireless clients.
7.4.1 Enabling OTIST
You must enable OTIST on both the AP and wireless client before you start transferring
settings.
Chapter 7Wireless LAN
The AP and wireless client(s) MUST use the same Setupkey.
Click the Network > Wireless LAN > OTIST. The following screen displays.
Figure 56 Network > Wireless LAN > OTIST
MAX-200HW2 User s Guide
101
Chapter 7Wireless LAN
The following table describes the labels in this screen.
Table 29 Network > Wireless LAN > OTIST
LABELDESCRIPTION
Setup KeyType an OTIST Setup Key of exactly eight ASCII characters in length.
Yes!If you want OTIST to automatically generate a WPA-PSK, you must:
StartClick Start to encrypt the wireless security data using the setup key and have the
The default OTIST setup key is "01234567".
Note: If you change the OTIST setup key here, you must also make
the same change on the wireless client(s).
#Change your security to any security other than WPA-PSK in the Wireless LAN >
General screen.
#Select the Yes! checkbox in the OTIST screen and click Start.
#The wireless screen displays an auto generated WPA-PSK and is now in WPA-
PSK security mode.
The WPA-PSK security settings are assigned to the wireless client when you start
OTIST.
Note: If you already have a WPA-PSK configured in the Wireless LAN
> General screen, and you run OTIST with Yes! selected,
OTIST will use the existing WPA-PSK.
ZyXEL Device set the wireless client to use the same wireless settings as the ZyXEL
Device. You must also activate and start OTIST on the wireless client all within three
minutes.
7.4.1.1 Wireless Client
Start the ZyXEL utility and click the Adapter tab. Select the OTIST check box, enter the
same Setup Key as your AP!s and click Save.
Figure 57 Example Wireless Client OTIST Screen
102
MAX-200HW2 User s Guide
Loading...
+ hidden pages
You need points to download manuals.
1 point = 1 manual.
You can buy points or you can get point for every manual you upload.