ZyXEL Communications MAX207HW2 User Manual

MAX-207HW2
WiMAX MIMO Indoor Simple CPE (2.5 GHz)
中文名稱:WiMAX 802.16e 2.5GHz 無線寬頻路由器
IP Address http://192.168.1.1
Admin Name and Password
User Name and Password
www.zyxel.com
Firmware Version 1.0 Edition 1, 6/2009
@dmin
284wj/6
User user
www.zyxel.com
Copyright © 2009 ZyXEL Communications Corporation
About This User's Guide
About This User's Guide
Intended Audience
This manual is intended for people who want to configure the ZyXEL WiMAX Modem using the web configurator. You s hould hav e at l east a basic knowledge of TCP/IP networking concepts and topology.
Related Documentation
•Quick Start Guide The Quick Start Guide is designed to help you get up and running right away. It
contains information on setting up your network and configuring for Internet access.
• Web Configurator Online Help Embedded web help for descriptions of individual screens and supplementary
information.
• Command Reference Guide The Command Reference Guide explains how to use the Command-Line
Interface (CLI) and CLI commands to configure the WiMAX Modem.
Note: It is recommended you use the web configurator to configure the WiMAX
Modem.
• Support Disc Refer to the included CD for support documents.
• ZyXEL Web Site Please refer to www.zyxel.com
product certifications.
for additional support documentation and
Documentation Feedback
Send your comments, questions or suggestions to: techwriters@zyxel.com.tw
Thank you!
The Technical Writing Team, ZyXEL Communications Corp., 6 Innovation Road II, Science-Based Industrial Park, Hsinchu, 30099, Taiwan.
User’s Guide
3
About This User's Guide
Need More Help?
More help is available at www.zyx el.com.
• Download Library Search for the latest product updates and documentation from this link. Read
the Tech Doc Overview to find out how to efficiently use the User Guide, Quick Start Guide and Command Line Interface Reference Guide in order to better understand how to use your product.
• Knowledge Base If you have a specific question about your product, the answer may be here.
This is a collection of answers to previously asked questions about ZyXEL products.
•Forum This contains discussions on ZyXEL prod ucts. Learn from others who use ZyXEL
products and share your experiences as well.
Customer Support
Should problems arise that cannot be solved by the methods listed above, you should conta ct your vendor. If you cannot cont act your vendor, then contact a ZyXEL office for the region in which you bought the device.
See http://www.zyxel.com/web/contact_us.php for contact information. Please have the following informatio n ready when you contact an office.
• Product model and serial number.
•Warranty Information.
• Date that you received your device.
4
• Brief description of the problem and the steps you took to solve it.
User’s Guide
Document Conventions
Document Conventions
Warnings and Notes
These are how warnings and notes are shown in this User’s Guide.
Warnings tell you about things that could harm you or your WiMAX Modem.
Note: Notes tell you other important information (for example, other things you may
need to configure or helpful tips) or recommendations.
Syntax Conventions
• The MAX-207HW2 may be referred to as the “WiMAX Modem”, the “device”, the “system” or the “product” in this User’s Guide.
• Product labels, screen names, field labels and field choices are all in bold font.
• A key stroke is denoted by square brackets and uppercase text, for example, [ENTER] means the “enter” or “return” key on your keyboard.
• “Enter” means for you to type one or more characters and then press the [ENTER] key. “Select” or “choose” means for you to use one of the predefined choices.
• A right angle bracket ( > ) within a screen name denotes a mouse click. For example, TOOLS > Logs > Log Settings means you first click Tools in the navigation panel, then the Logs sub menu and finally the Log Settings tab to get to that screen.
• Units of measurement may denote the “metric” value or the “scientific” value. For example, “k” for kilo may denote “1000” or “1024”, “M” for mega may denote “1000000” or “1048576” and so on.
• “e.g.,” is a shorthand for “for instance”, and “i.e.,” means “that is” or “in other words”.
User’s Guide
5
Document Conventions
Icons Used in Figures
Figures in this User’s Guide may use the following generic icons. The WiMAX Modem icon is not an exact representation of your WiMAX Modem.\
Table 1 Common Icons
WiMAX Device WiMAX Access Point Computer
Notebook Server WiMAX Base Station
Telephone Switch Router
Internet Cloud Internet/WiMAX
Cloud
Wireless Signal
6
User’s Guide
Safety Warnings
Safety Warnings
• Do NOT use this product near water, for example, in a wet basement or near a swimming pool.
• Do NOT expose your device to dampness, dust or corrosive liquids.
• Do NOT store things on the device.
• Do NOT install, use, or service this device during a thunderstorm. There is a remote risk of electric shock from lightning.
• Connect ONLY suitable accessories to the device.
• Do NOT open the device or unit. Opening or removing covers can expose you to dangerous high voltage points or other risks. ONLY qualified service personnel should service or disassemble this device. Please contact your vendor for further information.
• Make sure to connect the cables to the correct ports.
• Place connecting cables carefully so that no one will step on them or stumble over them.
• Always disconnect all cables from this device before servicing or disassembling.
• Use ONLY an appropriate power adaptor or cord for your device. Connect it to the right supply voltage (for example, 110V AC in North America or 230V AC in Europe).
• Do NOT remove the plug and connect it to a power outlet by itself; always attach the plug to the power adaptor first before connecting it to a power outlet.
• Do NOT allow anything to rest on the power adaptor or cord and do NOT place the product where anyone can walk on the power adaptor or cord.
• Do NOT use the device if the power adaptor or cord is damaged as it might cause electrocution.
• If the power adaptor or cord is damaged, remove it from the device and the power source.
• Do NOT attempt to repair the power adaptor or cord. Contact your local vendor to order a new one.Do not use the device outside, and make sure all the connections are indoors. There is a remote risk of electric shock from lightning.
• Do NOT obstruct the device ventilation slots, as insufficient airflow may harm your device.Use only No. 26 AWG (American Wire Gauge) or larger telecommunication line cord.
• Antenna Warning! This device meets ETSI and FCC certification requirements when using the included antenna(s). Only use the included antenna(s).
• If you wall mount your device, make sure that no electrical lines, gas or water pipes will be damaged.
• Make sure that the cable system is grounded so as to provide some protection against voltage surges.
User’s Guide
Your product is marked with this symbol, which is known as the WEEE mark. WEEE stands for Waste Electronics and Electrical Equipment. It means that used
electrical and electronic products should not be mixed with general waste. Used electrical and electronic equipment should be treated separately.
7
Safety Warnings
8
User’s Guide
Contents Overview
Contents Overview
Introduction and Wizards ......................................................................................................17
Getting Started ........................................................................................................................... 19
Introducing the Web Configurator .............................................................................................. 23
Basic Screens ........................................................................................................................29
The Setup Screens .................................................................................................................... 31
Advanced Screens .................................................................................................................39
The Status Screen ..................................................................................................................... 41
The LAN Configuration Screens ................................................................................................ 45
The WIFI Configuration Screen .................................................................................................59
The WAN Configuration Screens ............................................................................................... 77
The NAT Configuration Screens ................................................................................................ 89
The System Configuration Screens ........................................................................................... 99
Voice Screens .......................................................................................................................107
The Service Configuration Screens ......................................................................................... 109
The Phone Screens ................................................................................................................. 127
The Phone Book Screens ........................................................................................................137
Tools & Status Screens .......................................................................................................143
The Certificates Screens ......................................................................................................... 145
The Remote Management Screens ......................................................................................... 149
The Password Setup Screen ................................................................................................... 161
The Status Screen ................................................................................................................... 163
Troubleshooting and Specifications ..................................................................................167
Troubleshooting ..................................................... .................................................................. 169
Product Specifications ............................................................................................................. 177
Appendices and Index .........................................................................................................185
User’s Guide
9
Contents Overview
10
User’s Guide
Table of Contents
Table of Contents
About This User's Guide..........................................................................................................3
Document Conventions............................................................................................................5
Safety Warnings ........................................................................................................................7
Contents Overview ...................................................................................................................9
Table of Contents....................................................................................................................11
Part I: Introduction and Wizards........................................................... 17
Chapter 1
Getting Started........................................................................................................................19
1.1 About Your WiMAX Modem .................................................................................................19
1.1.1 WiMAX Internet Access ............................................................................................. 19
1.1.2 Make Calls via Internet Telephony Service Provider .................................................. 20
1.2 WiMAX Modem Hardware ................................................................................................... 21
1.2.1 LEDs ................................................ ... ... ... .... ... ... ............................................. ..........21
1.3 Good Habits for Managing the WiMAX Modem ................................................................... 22
Chapter 2
Introducing the Web Configurator ........................................................................................23
2.1 Overview ............. ............................................. ... .... ............................................. ... ............. 23
2.1.1 Accessing the Web Configurator ................................................................................ 23
2.1.2 The Reset Button ....................................................................................................... 24
2.2 The Main Screen ................................................................................................................. 25
Part II: Basic Screens............................................................................ 29
Chapter 3
The Setup Screens..................................................................................................................31
3.1 Overview ............. ............................................. ... .... ............................................. ... ............. 31
3.2 Set IP Address (LAN 設定 ) ................................................................................................. 32
User’s Guide
3.1.1 What You Can Do in This Chapter ............................................................................. 31
3.1.2 What You Need to Know .................................................. ... ... .... ................................ 31
3.1.3 Before You Begin ................................................................ ... .... ... ... ... .... ................... 32
11
Table of Contents
3.3 DHCP Client (DHCP 用戶端 ) .............................................................................................. 33
3.4 Time Setting ( 時間設定 ) ........... .......................................................................... ................ 35
3.4.1 Pre-Defined NTP Time Servers List ........................... ... ... ... ... .... ... ... ... .... ... ... ... .......... 36
3.4.2 Resetting the Time . ... ... .............................................. ... ... ... ....................................... 37
Part III: Advanced Screens.................................................................... 39
Chapter 4
The Status Screen...................................................................................................................41
4.1 Overview ............. ............................................. ... .... ............................................. ... ............. 41
4.2 Status ( 狀態 ) Screen .......................................................................................................... 41
Chapter 5
The LAN Configuration Screens............................................................................................45
5.1 Overview ............. ............................................. ... .... ............................................. ... ............. 45
5.1.1 What You Can Do in This Chapter ............................................................................. 45
5.1.2 What You Need to Know .................................................. ... ... .... ................................ 45
5.2 DHCP Setup .............................................. ... ... ... .... ... ... ............................................. .......... 46
5.3 Static DHCP ..................................... ... ... .... ............................................. ............................. 47
5.4 IP Alias ......................................... ... ... ... .............................................. ................................ 49
5.5 IP Static Route ..................................................................................................................... 51
5.5.1 IP Static Route Setup ................................................................................................. 52
5.6 Other Settings ........ ............................................. .............................................. ... ................53
5.7 Technical Ref erence .................. ... ... ... ... .... ... ............................................. ... .... ... ... ... ... ....... 54
5.7.1 IP Address and Subnet Mask ..................................................................................... 54
5.7.2 DHCP Setup ..................... ... ... ... ... .... ... ... ... .............................................. ... ... .............55
5.7.3 LAN TCP/IP .................. .... ... ... ............................................. ....................................... 55
5.7.4 DNS Server Address ................................. .............................................. ... ... ... .......... 55
5.7.5 RIP Setup .................................. ... .... ... ... ... .............................................. ... ... ... ..........56
5.7.6 Multicast ........................................... ... ............................................. .......................... 57
Chapter 6
The WIFI Configuration Screen .............................................................................................59
6.1 Overview ............. ............................................. ... .... ............................................. ... ............. 59
6.1.1 What You Can Do in the WIFI Screens ...................................................................... 59
6.1.2 What You Need to Know About WIFI .................................................. .... ... ... ... ... .... ... 60
6.1.3 Before You Start ..................................... ... .... ... ... ... ............................................. .... ...63
6.2 General Screen .............................................. ... .... ... ... ... .... ... ............................................. 63
6.2.1 No Security .......................... ... ............................................. ... .... ................................ 65
6.2.2 WEP Encryption ..... ... ............................................. .... ... ... ... ... .... ................................ 66
6.2.3 WPA(2)-PSK .............................................................................................................. 66
12
User’s Guide
Table of Contents
6.2.4 Wireless LAN Advanced Setup ................................................................................. 68
6.3 MAC Filter ....................................................................................................................... 69
6.4 Wireless LAN Technic al Ref erence ........................................... ... ... .... ... ... .......................... 70
6.4.1 Additional Wireless Terms .......................................................................................... 71
6.4.2 Wireless Security Overview ....................................................................................... 71
6.4.3 MBSSID .............................................. ... ... .............................................. ................... 73
6.4.4 Wireless Distribution System (WDS) .......................................................................... 74
6.4.5 WiFi Protected Setup ................................................................................................. 74
Chapter 7
The WAN Configuration Screens...........................................................................................77
7.1 Overview ............. ............................................. ... .... ............................................. ... ............. 77
7.1.1 What You Can Do in This Chapter ............................................................................. 77
7.1.2 What You Need to Know .................................................. ... ... .... ................................ 77
7.2 Internet Connection ................... ... ... ... ................................................................................. 79
7.3 WiMAX Configuration ................... ... ... ............................................. .... ... ... ... .... ... ... ... ... ....... 82
7.3.1 Frequency Ranges .................................... .... ... ... ... .... ... ............................................. 85
7.3.2 Configuring Frequency Settings ................................................................................. 85
7.3.3 Using the WiMAX Frequency Screen ......................................................................... 86
Chapter 8
The NAT Configuration Screens............................................................................................89
8.1 Overview ............. ............................................. ... .... ............................................. ... ............. 89
8.1.1 What You Can Do in This Chapter ............................................................................. 89
8.2 General ............................ ... ... .............................................. ... ... .......................................... 90
8.3 Port Forwarding ................................................. .... ............................................. ... ... .......... 91
8.3.1 Port Forwarding Options ............................................................................................ 91
8.3.2 Port Forwarding Rule Setup ....................................................................................... 93
8.4 Trigger Port ............ ... .... ... ... ............................................. .... ... ............................................. 94
8.4.1 Trigger Port Forwarding Example .............................................................................. 96
Chapter 9
The System Configuration Screens......................................................................................99
9.1 Overview ............. ............................................. ... .... ............................................. ... ............. 99
9.1.1 What You Can Do in This Chapter ............................................................................. 99
9.1.2 What You Need to Know .................................................. ... ... .... ................................ 99
9.2 Dynamic DNS ......................................................................................... ... ... .... ................. 100
9.3 Firmware ................ ... .... ............................................. ... ... .... ... ... ... ..................................... 102
9.3.1 The Firmware Upload Process ............ ............. ............. ............. ............. ......... ........ 103
9.4 Configuration ............ .... ... ... ... .... ... ... ... ............................................. .... ... ... ........................ 104
9.4.1 The Restore Configuration Process ......................................................................... 105
9.5 Restart ................................................ ............................................. .... ... ... ........................ 105
9.5.1 The Restart Process ................................................................................................ 106
User’s Guide
13
Table of Contents
Part IV: Voice Screens ......................................................................... 107
Chapter 10
The Service Configuration Screens....................................................................................109
10.1 Overview .......................................................................................................................... 109
10.1.1 What You Can Do in This Chapter ......................................................................... 109
10.1.2 What You Need to Know ........................................................................................ 109
10.1.3 Before you Begin .................................. .......... .......... ......... .......... .......... ......... ....... ..111
10.2 SIP Settings ......................................................................................................................111
10.2.1 Advanced SIP Settings ...........................................................................................112
10.3 QoS ..................................................................................................................................119
10.4 Technical Reference ........................................................................................................121
10.4.1 SIP Call Progression ..............................................................................................121
10.4.2 SIP Client Server .................................................................................................... 122
10.4.3 SIP User Agent ...................................................................................................... 122
10.4.4 SIP Proxy Server ..................... .......... .......... ......... .......... .......... ......... ....... ......... ..... 122
10.4.5 SIP Redirect Server ............................................................................................... 123
10.4.6 NAT and SIP .......................................................................................................... 124
10.4.7 DiffServ .................................................................................................................. 124
10.4.8 DSCP and Per-Hop Behavior ................................................................................. 125
Chapter 11
The Phone Screens...............................................................................................................127
11.1 Overview .......................................................................................................................... 127
11.1.1 What You Can Do in This Chapter ......................................................................... 127
11.1.2 What You Need to Know ........................................................................................ 127
11.2 Analog Phone .................................................................................................................. 128
11.2.1 Advanced Analog Phone Setup ............................................................................. 129
11.3 Common .......................................................................................................................... 130
11.4 Region .............................................................................................................................. 131
11.5 Technical Reference ........................................................................................................132
11.5.1 The Flash Key ........................................................................................................ 132
11.5.2 Europe Type Supplementary Phone Services ........................................................ 133
11.5.3 USA Type Supplementary Services ....................................................................... 134
Chapter 12
The Phone Book Screens.....................................................................................................137
12.1 Overview .......................................................................................................................... 137
12.1.1 What You Can Do in This Chapter ......................................................................... 137
12.1.2 What You Need to Know ........................................................................................ 137
12.2 Incoming Call Policy ........................................................................................................ 138
12.3 Speed Dial ....................................................................................................................... 140
12.3.1 Speed Dial Setup ................................................................................................... 141
14
User’s Guide
Table of Contents
Part V: Tools & Status Screens........................................................... 143
Chapter 13
The Certificates Screens......................................................................................................145
13.1 Overview .......................................................................................................................... 145
13.1.1 What You Can Do in This Chapter ......................................................................... 145
13.1.2 What You Need to Know ........................................................................................ 145
13.2 My Certificates .................................................................................................................146
13.3 Trusted CAs ..................................................................................................................... 146
Chapter 14
The Remote Management Screens .....................................................................................149
14.1 Overview .......................................................................................................................... 149
14.1.1 What You Can Do in This Chapter ......................................................................... 149
14.1.2 What You Need to Know ........................................................................................ 150
14.2 WWW .............................................................................................................................. 151
14.3 Telnet ............................................................................................................................... 152
14.4 FTP ..................................................................................................................................153
14.5 SNMP .............................................................................................................................. 154
14.5.1 SNMP Traps ...........................................................................................................155
14.5.2 SNMP Options .......................................................................................................156
14.6 DNS ................................................................................................................................. 157
14.7 Security ............................................................................................................................ 158
Chapter 15
The Password Setup Screen................................................................................................161
15.1 Overview .......................................................................................................................... 161
15.2 Password Setup .............................................................................................................. 161
Chapter 16
The Status Screen.................................................................................................................163
16.1 Overview .......................................................................................................................... 163
16.2 Status Screen .................................................................................................................. 163
Part VI: Troubleshooting and Specifications .................................... 167
Chapter 17
Troubleshooting....................................................................................................................169
17.1 Power, Hardware Connections, and LEDs ........................................... ... ... .... ... ... ... ... .... . 169
17.2 WiMAX Modem Access and Login .................................................................................. 170
17.3 Internet Access ................................................................................................................172
User’s Guide
15
Table of Contents
17.4 Phone Calls and VoIP ......................................................................................................174
17.5 Reset the WiMAX Modem to Its Factory Defaults ........................................................... 175
17.5.1 Pop-up Windows, JavaScripts and Java Permissions ........................................... 175
Chapter 18
Product Specifications.........................................................................................................177
Part VII: Appendices and Index.......................................................... 185
Appendix A WiMAX Security................................................................................................187
Appendix B Setting Up Your Computer’s IP Address...........................................................191
Appendix C Pop-up Windows, JavaScripts and Java Permissions......................................219
Appendix D IP Addresses and Subnetting...........................................................................229
Appendix E Importing Certificates........................................................................................241
Appendix F SIP Passthrough...............................................................................................273
Appendix G Common Services............................................................................................275
Appendix H Legal Information..............................................................................................279
Index.......................................................................................................................................283
16
User’s Guide
PART I
Introduction and
Wizards
Getting Started (19)
Introducing the Web Configurator (23)
17
18
CHAPTER 1
Getting Started
1.1 About Your WiMAX Modem
The WiMAX Modem has a built-in switch and one phone port. It allows you to access the Internet by connecting to a WiMAX wireless network.
You can use a traditional analog t elephone to make Internet calls using the WiMAX Modem’s Voice over IP (VoIP) communication capabilities.
You can configure firewall and content filtering as well as a host of other features.
The web browser-based Graphical User Interface (GUI), also known as the web configurator, provides easy management.
See Chapter 18 on page 177 for a complete list of features for your model.
1.1.1 WiMAX Internet Access
Connect your computer or network to the WiMAX Modem for WiMAX Internet access. See the Quick Start Guide for instructions on hardware connection.
In a wireless metropolitan area network (MAN), the WiMAX Modem connects to a WiMAX base station (BS) for Internet access.
The following diagram shows a notebook computer equipped with the WiMAX Modem connecting to the Internet through a WiMAX base station (marked BS).
Figure 1 Mobile Station and Base Station
User’s Guide
When the firewall is on, all inc o m ing traffic from the Internet to your network is blocked unless it is initiated from your network.
19
Chapter 1 Getting Started
Use content filtering to block access to web sites with URLs containing keywords that you specify. You can define time periods and days during which content filtering is enabled and include or exclude particular computers on your network from content filtering. For example, you could bloc k access to certain web sites for the kids.
1.1.2 Make Calls via Internet Telephony Service Provider
In a home or small office environment, you can use the WiMAX Modem to make and receive the following types of VoIP telephone calls:
• Peer-to-Peer calls - Use the WiMAX Modem to make a call directly to the recipient’s IP address without using a SIP proxy server.
Figure 2 WiMAX Modem’s VoIP Features - Peer-to-Peer Calls
• Calls via a VoIP service provider - The WiMAX Modem sends your call to a VoIP service provider’s SIP server which forwards your calls to either VoIP or PSTN phones.
Figure 3 WiMAX Modem’s VoIP Features - Calls via VoIP Service Provider
20
User’s Guide
1.2 WiMAX Modem Hardware
Follow the instructions in the Quick Start Guide to make hardware connections.
1.2.1 LEDs
The following figure shows the LEDs (lights) on the WiMAX Modem.
Figure 4 The WiMAX Modem’s LEDs
POWER
LED
WIMAX
LINK
SIGNAL
STRENGTH
INDICATORS
Chapter 1 Getting Started
VOICE
LEDS 1 & 2
WLAN
LED
The following table describes your WiMAX Modem’s LEDs (from right to left).
Table 2 The WiMAX Modem
LED STATE DESCRIPTION
Power Off The WiMAX Modem is not receiving power.
Red The WiMAX Modem is receiving power but has been
unable to start up correctly or is not receiving enough power. See the Troubleshooting section for more information.
Green The WiMAX Modem is receiving power and
functioning correctly.
WiMAN Link Off The WiMAX Modem is not connected to a wireless
(WiMAX) network.
Green The WiMAX Modem is successfully connected to a
wireless (WiMAX) network.
Green (Blinking Slowly)
Green (Blinking Quickly)
The WiMAX Modem is searching for a wireless (WiMAX) network.
The WiMAX Modem has found a wireless (WiMAX) network and is connecting.
User’s Guide
21
Chapter 1 Getting Started
Table 2 The WiMAX Modem
LED STATE DESCRIPTION
Signal Strength Indicator
Voice Off No SIP account is registered, or the WiMAX Modem
WLAN Off The Wi-Fi network is not operational.
The Strength Indicator LEDs display the Interference-plus-Noise Ratio (CINR) of the wireless (WiMAX) connection.
Signal 1 On The signal strength is in the range between 5 and
15.
Signal 2 On The signal strength is in the range between 16 and
24.
Signal 3 On The signal strength is greater than or equal to 25
dBm
is not receiving power. Green A SIP account is registered. Green (Blinking) A SIP account is registered, and the phone attached
to the LINE port is in use (off the hook). Yellow A SIP account is registered and has a voice
message on the SIP server. Yellow (Blinking) A SIP account is registered and has a voice
message on the SIP server, and the phone attached
to the LINE port is in use (off the hook).
Green The Wi-Fi network is operational. Blinking Green The WiMAX Device is sending and receiving data
across the Wi-Fi network.
1.3 Good Habits for Managing the WiMAX Modem
Do the following things regularly to make the WiMAX Modem more secure and to manage the WiMAX Modem more effectively.
• Change the password. Use a password that’s not easy to guess and that consists of different types of characters, such as numbers and letters.
• Write down the password and put it in a safe place.
• Back up the configuration (and make sure you know how to restore it). Restoring an earlier working configuration may be useful if the WiMAX Modem becomes unstable or even crashes. If you forget yo ur password, you will have to reset the WiMAX Modem to its factory default settings. If you backed up an earlier configuration file, you would not have to totally re-configure the WiMAX Modem. You could simply restore your last configuration.
22
User’s Guide
CHAPTER 2
Introducing the Web
Configurator
2.1 Overview
The web configurator is an HTML-based management interface that allows easy device set up and management via any web browser that supports: HTML 4.0, CSS 2.0, and JavaScript 1.5, and higher. The recommended screen resolution for using the web configurator is 1024 by 768 pixels and 16-bit color, or higher.
In order to use the web configurator you need to allow:
• Web brows er pop-up windows from your device. W eb pop-up blocking i s enabled by default in many operating systems and web browsers.
• JavaScript (enabled by default in most web browsers).
• Java permissions (enabled by default in most web browsers).
See the Appendix C on page 219 for more information on configuring your web browser.
2.1.1 Accessing the Web Configurator
1 Make sure your WiMAX Modem hardware is properly connected (refer to th e Quick
Start Guide for more information).
2 Launch your web browser.
3 Enter "192.168.1.1" as the URL.
User’s Guide
23
Chapter 2 Introducing the Web Configurator
4 A login screen displays. Enter the default User Name ( 使用者名稱 ) (@dmin) and
Password ( 密碼 ) (284wj/6), and then click Login ( 登入 ). Figure 5 Password Screen
5 The following screen displays if you have not yet changed your password. It is
highly recommended you change the default password. Enter a new password, retype it to confirm and click Apply ( 套用 ); alternatively click Ignore (忽略 ) to proceed to the main menu if you do not want to change the password now.
Figure 6 Change Password Screen
2.1.2 The Reset Button
If you forget your password or cannot access the web configurator, you will need to use the Reset button to reload the factory-default configur ation file. This means that you will lose all configurations that you had previously and the password will be reset to “284wj/6”.
2.1.2.1 Using The Reset Button
1 Make sure the Power light is on (not blinking).
2 To set the device back to the factory default settings, press the Reset button for
ten seconds or until the Power light begins to blink and then release it. When the Power light begins to blink, the defaults have been restored and the device
restarts.
24
3 Reconfigure the WiMAX Modem following the steps in your Quick Start Guide.
User’s Guide
2.2 The Main Screen
When you first log into the web configurator and by-pass the wizard, the Main screen appears. Here you can view a concise summary of your WiMAX Modem connection status. This is also the default “home” page for the ZyXEL web configurator and it contains conveniently-placed shortcuts to all of the other screens.
Note: Some features in the web configurator may not be available depe ndin g on you r
firmware version and/or configuration.
Figure 7 Main Screen ( 首頁 )
Chapter 2 Introducing the Web Configurator
User’s Guide
The following table describes the icons in this screen.
Table 3 Main (首頁) > Icons
ICON DESCRIPTION
MAIN ( 首頁 ) Click to return to the Main screen.
SETUP Click to go the Setup screen, where you can configure LAN,
DHCP and WAN settings.
ADVANCED Click to go to the Advanced screen, where you can configure
features like Port Forwarding and Triggering, SNTP and so on.
( 設定 )
( 進階 )
25
Chapter 2 Introducing the Web Configurator
Table 3 Main (首頁) > Icons (continued)
ICON DESCRIPTION
VOICE Click to go to the Voice screen, where you can configure your
voice service and phone settings . TOOLS (工具)
Click to go the Tools screen, where you can configure your firewall, QoS, and content filter, among other things.
STATUS (狀態) Click to go to the Status screen, where you can view status and
statistical information for all connections and interfaces. Strength Indicator Displays a visual representation of the quality of your WiMAX
connection.
• Disconnected - Zero bars
Poor reception - One bar
Good reception - Two bars
Excellent reception - Three bars
The following table describes the labels in this screen.
Table 4 Main
LABEL DESCRIPTION
Logout ( 登出 ) Click to log out of the web configurator.
Note: This does not log you off the WiMAX network, it simply
logs you out of the WiMAX Modem’s browser-based configuration interface.
WiMAX Connection Status (WiMAX 連線狀 )
Software Version (軟體 版本 )
This field indicates the current status of your WiMAX connection. Status messages are as follows:
Connected - Indicates that the WiMAX Modem is connected to the WiMAX network. Use the Strength Indicator icon to determine the quality of your network connection.
Disconnected - Indicates that the WiMAX Modem is not connected to the WiMAX network.
DL_SYN - Indicates a download synchronization is in progress. This means the firmware is checking with the server for any updates or settings alterations.
This field indicates the version number of the WiMAX Modem’s firmware. The version number takes the form of:
Version(Build),release status (candidate) | Version Release Date.
26
For example: V3.60(BCC.0)c4 | 07/08/2008 indicates that the firmware is 3.60, build BCC.0, candidate4, released on July 08,
2008.
User’s Guide
Chapter 2 Introducing the Web Configurator
Table 4 Main (continued)
LABEL DESCRIPTION
WiMAX Firmware Version (WiMAX韌體版 )
Version Date ( 版本日期)This field indicates the exact date and time the current firmware
System Uptime ( 系統開 機時間 )
This field displays the version number of the chip firmware used in this WiMAX Modem.
was compiled. This field indicates how long the WiMAX Modem has been on.
This resets every time you shut the device down or restart it.
Note: For security reasons, the WiMAX Modem automatically logs you out if you do
not use the web configurator for five minutes. If this happens, simply log in again.
User’s Guide
27
Chapter 2 Introducing the Web Configurator
28
User’s Guide
PART II
Basic Screens
The Main Screen (25)
The Setup Screens (31)
29
30
CHAPTER 3
The Setup Screens
3.1 Overview
Use these screens to configure or view LAN, DHCP Client and WAN settings.
3.1.1 What You Can Do in This Chapter
•The Set IP Address (LAN 設定 ) screen (Section 3.2 on page 32) lets you configure the WiMAX Modem’s IP address and subnet mask.
•The DHCP Client (DHCP 用戶端 ) screen (Section 3.3 on page 33) lets you view all DHCP client information.
•The Time Setting (時間設定) screen (Section 3.4 on page 35) lets you configure your WiMAX Modem’s time and date keeping settings.
3.1.2 What You Need to Know
The following terms and concepts may help as you read through this chapter.
LAN
A Local Area Network, or a shared communication system to which many computers are attached. A LAN, as its name implies, is limited to a local area such as a home or office environment. LANs have different topologies, the most common being the linear bus and the star configuration.
IP Address
IP addresses identify individual devices on a network. Every networking device (including computers, servers, routers, printers, etc.) needs an IP address to communicate across the network. These networking devices are also known as hosts.
Subnet Mask
The subnet mask specifies the network number portion of an IP address. Your device will compute the subnet mask automatically based on the IP Address that
User’s Guide
31
Chapter 3 The Setup Screens
you entered. Y ou do not need to change the computer subnet mask unless you are instructed to do so.
DHCP
Your WiMAX Modem can act as a DHCP (Dynamic Host Configuration Protocol) server that can assign your LAN computers an IP address, subnet mask, DNS and other routing information when its LAN DHCP feature is turned on.
Daytime
A network protocol used by devices for debugging and time measurement. A computer can use this protocol to set its internal clock but only if it knows in which order the year, month, and day are returned by the server. Not all servers use the same format.
Time
A network protocol for retrieving the current time from a server. The computer issuing the command compares the time on its clock to the information returned by the server, adjusts itself automatically for time zone differences, then calculates the difference and corrects itself if there has been any temporal drift.
NTP
NTP stands for Network Time Protocol. It is employed by devices connected to the Internet in order to obtain a precise time setting from an official time server. These time servers are accurate to within 200 microseconds.
3.1.3 Before You Begin
• Make sure that you have made all the appropriate hardware connections to the WiMAX Modem, as described in the Quick Start Guide.
• Make sure that you have logg ed in to the web confi gurator at least one time and changed your password from the de fau lt , as de s cr ib ed in the Quick Start Guide.
3.2 Set IP Address (LAN 設定 )
Click the SETUP (設定) icon in the navigation bar to set up the WiMAX Modem’s IP address and subnet mask. This screen displays this screen by default. If you are in
32
User’s Guide
Chapter 3 The Setup Screens
any other sub-screen you can simply choose Set IP Address (LAN設定) from the navigation menu on the left to open it again.
Figure 8 SETUP(設定) > Set IP Address (LAN 設定 )
The following table describes the labels in this screen.
Table 5 SETUP ( 設定 ) > Set IP Address (LAN 設定 )
LABEL DESCRIPTION
IP Address (IP 位址 ) Enter the IP address of the WiMAX Modem on the LAN.
Note: This field is the IP address you use to access the
WiMAX Modem on the LAN. If the web configurator is running on a computer on the LAN, you lose access to it as soon as you change this field and click Apply ( ). You can access the web configurator again by typing the new IP address in the browser.
IP Subnet Mask (IP子網 路遮罩 )
Apply ( 套用 ) Click to save your changes. Reset ( 重設 )
Enter the subnet mask of the LAN.
Click to restore your previously saved settings.
3.3 DHCP Client (DHCP 用戶端 )
User’s Guide
Click SETUP ( 設定 ) > DHCP Client (DHCP 用戶端 ) to display the IP addresses, Host Names and MAC addresses of the devices currently connected to the WiMAX
33
Chapter 3 The Setup Screens
Modem. These settings can be configured in the ADVANCED ( 進階 ) > LAN Configuration (LAN 設定 ) > DHCP Setup screen.
Figure 9 SETUP ( 設定 ) > DHCP Client (DHCP 用戶端 )
The following table describes the labels in this screen.
Table 6 SETUP(設定) > DHCP Client(DHCP 用戶端 )
LABEL DESCRIPTION
# The number of the item in this list. IP Address (IP 位址 ) This field displays the IP address the WiMAX Modem assigned to
a computer in the network.
Host Name ( 主機名稱 ) This field displays the system name of the computer to which
the WiMAX Modem assigned the IP address.
MAC Address (MAC位址)This field displays the MAC address of the computer to which the
WiMAX Modem assigned the IP address.
Reserve ( 保留 ) Apply ( 套用 )
Refresh ( 重新整理 )
Select Reserve ( 保留 ) and click Apply ( 套用 ) to have the WiMAX Modem always map the currently assigned IP address to the device with this MAC address.
Clear Remain (保留) and click Apply (套用) to allow the WiMAX Modem to assign a new IP address to this device with this MAC address when next time the device sends a new DHCP request.
Click this button to update the table data.
34
User’s Guide
3.4 Time Setting ( 時間設定 )
Click SETUP ( 設定 ) > Time Setting ( 時間設定 ) to set the date, time, and time zone for the WiMAX Modem.
Figure 10 SETUP (設定) > Time Setting (時間設定)
Chapter 3 The Setup Screens
User’s Guide
The following table describes the labels in this screen.
Table 7 SETUP (設定) > Time Setting ( 時間設定 )
LABEL DESCRIPTION
Current Time and Date ( 現在的時間與日期 ) Current Time ( 現在時間)Displays the current time according to the WiMAX Modem.
Current Date ( 現在日期)Displays the current time according to the WiMAX Modem.
Time and Date Setup ( 時間和日期設定 ) Manual ( 手動 )
New Time ( 新的時 )
New Date ( 新的日期 )
Select this if you want to specify the current date and time in the fields below.
Enter the new time in this field, and click Apply ( 套用 ).
Enter the new date in this field, and click Apply ( 套用 ).
35
Chapter 3 The Setup Screens
Table 7 SETUP (設定) > Time Setting ( 時間設定 )
LABEL DESCRIPTION
Get from Time Server ( 從時間伺服器取得 )
Time Protocol ( 時間 通訊協定 )
Time Server Address ( 時間伺服器 位址 )
Time Zone Setup ( 時區設定 ) Time Zone (時區 ) Select the time zone at your location. Daylight Savings ( 日光
節約 )
Start Date (開始時間)Enter which hour on which day of which week of which month
End Date (結束時間) Enter which hour on the which day of which week of which
Apply ( 套用 ) Reset ( 重設 ) Click to restore your previously saved settings.
Select this if you want to use a time server to update the current date and time in the WiMAX Modem.
Select the time service protocol that your time server uses.Check with your ISP or network administrator, or use trial­and-error to find a protocol that works.
Daytime (RFC 867) - This format is day/month/year/time zone.
Time (RFC 868) - This format displays a 4-byte integer giving the total number of seconds since 1970/1/1 at 0:0:0.
NTP (RFC 1305) - This format is similar to Time (RFC 868). Enter the IP address or URL of your time server . Check with your
ISP or network administrator if you are unsure of this information.
Select this if your location uses daylight savings time. Daylight savings is a period from late spring to early fall when many places set their clocks ahead of normal local time by one hour to give more daytime light in the evening.
daylight-savings time starts.
month daylight-savings time ends. Click to save your changes.
3.4.1 Pre-Defined NTP Time Servers List
The WiMAX Modem uses a pre-defined list of NTP time servers if you do not specify a time server or it cannot synchronize with the time server you specified. It can use this list regardless of the time protocol you select.
When the WiMAX Modem uses the list, it randomly selects one server and tries to synchronize with it. If the synchronization fails, then it goes through the rest of the list in order until either it is successful or all the pre-defined NTP time servers have been tried.
Table 8 Pre-defined NTP Time Servers
ntp1.cs.wisc.edu ntp1.gbg.netnod.se ntp2.cs.wisc.edu tock.usno.navy.mil ntp3.cs.wisc.edu
36
User’s Guide
Table 8 Pre-defined NTP Time Servers (continued)
ntp.cs.strath.ac.uk ntp1.sp.se time1.stupi.se tick.stdtime.gov.tw tock.stdtime.gov.tw time.stdtime.gov.tw
3.4.2 Resetting the Time
The WiMAX Modem automatically resets the time in the following circumstances:
• When the device starts up, such as when you press the Power button.
• When you click Apply (套用 ) in the SETUP (設定 ) > Time Setting (時間設定) screen.
• Once every 24-hours after starting up.
Chapter 3 The Setup Screens
User’s Guide
37
Chapter 3 The Setup Screens
38
User’s Guide
PART III
Advanced Screens
The Status Screen (41)
The LAN Configuration Screens (45)
The WIFI Configuration Screen (59)
The WAN Configuration Screens (77)
The NAT Configuration Screens (89)
The System Configuration Screens (99)
39
40
CHAPTER 4
The Status Screen
4.1 Overview
Use this screen to view a complete summary of your WiMAX Modem connection status.
4.2 Status ( 狀態 ) Screen
Click Advanced ( 進階 ) > STATUS ( 狀態 ) in the navigation bar to go to this screen, where you can view the current status of the device, system resources, interfaces (LAN and WAN), and SIP accounts. You can also register and un­register SIP accounts as well as view detailed information from DHCP and statistics from WiMAX, VoIP, bandwidth management, and traffic.
Figure 11 Advanced ( 進階 ) > Status ( 狀態 )
The following tables describe the labels in this screen.
Table 9 Advanced ( 進階 ) > Status ( 狀態 )
LABEL DESCRIPTION
Refresh Interval Select how often you want the WiMAX Modem to update this screen. Refresh Now Click this to update this screen immediately.
User’s Guide
41
Chapter 4 The Status Screen
Table 9 Advanced ( 進階 ) > Status ( 狀態 ) (continued)
LABEL DESCRIPTION
Device Information System Name This field displays the WiMAX Modem system name. It is used for
Firmware Version
WAN Information IP Address This field displays the current IP address of the WiMAX Modem in the
IP Subnet Mask This field displays the current subnet mask on the WAN. DHCP This field displays what DHCP services the WiMAX Modem is using in the
LAN Information IP Address This field displays the current IP address of the WiMAX Modem in the
IP Subnet Mask This field displays the current subnet mask in the LAN. DHCP This field displays what DHCP services the WiMAX Modem is providing
identification. This field displays the current version of the firmware inside the device.
It also shows the date the firmware version was created. You can change the firmware version by uploading new firmware in
ADVANCED (進階) > System Configuration (系統組態) > Firmware.
WAN.
WAN. Choices are:
Client - The WiMAX Modem is a DHCP client in the WAN. Its IP address comes from a DHCP server on the WAN. None - The WiMAX Modem is not using any DHCP services in the WAN. It has a static IP address.
LAN.
to the LAN. Choices are:
Server - The WiMAX Modem is a DHCP server in the LAN. It assigns IP addresses to other computers in the LAN.
Relay - The WiMAX Modem is routing DHCP requests to one or more DHCP servers. The DHCP server(s) may be on another network.
None - The WiMAX Modem is not providing any DHCP services to the LAN.
You can change this in ADVAN CED (進階) > LAN Configuration (LAN
設定 ) > DHCP Setup. WiMAX Information CINR mean This field shows the average Carrier to Interference plus Noise Ratio of
the current connection. This value is an indication of over all radio signal
quality. A higher value indicates a higher signal quality, and a lower
value indicates a lower signal quality. CINR deviation This field shows the amount of change in the CINR level. This value is
an indication of radio signal stability. A lower number indicates a more
stable signal, and a higher number indicates a less stable signal. RSSI This field shows the Received Signal Strength Indication. This value is a
measurement of overall radio signal strength. A higher RSSI level
indicates a stronger signal, and a lower RSSI level indicates a weaker
signal.
A strong signal does not necessarily indicate a good signal: a strong
signal may have a low signal-to-noise ratio (SNR). Interface Status
42
User’s Guide
Chapter 4 The Status Screen
Table 9 Advanced ( 進階 ) > Status ( 狀態 ) (continued)
LABEL DESCRIPTION
Interface This column displays each interface of the WiMAX Modem. Status This field indicates whether or not the WiMAX Modem is using the
interface.
For the WAN interface, this field displays Up when the WiMAX Modem is
connected to a WiMAX network, and Down when the WiMAX Modem is
not connected to a WiMAX network.
For the LAN interface, this field displays Up when the WiMAX Modem is
using the interface and Down when the WiMAX Modem is not using the
interface.
User’s Guide
43
Chapter 4 The Status Screen
44
User’s Guide
CHAPTER 5
The LAN Configuration Screens
5.1 Overview
Use the ADVANCED > LAN Configuration screens to set up the WiMAX Modem on the LAN. You can configure its IP addr ess and subnet mask, DHCP services, and other subnets. You can also control how the WiMAX Modem sends routing information using RIP.
A Local Area Network (LAN) is a shared communication system to which many computers are attached. A LAN is usually a computer network limited to the immediate area, such as the same building or floor of a building.
5.1.1 What You Can Do in This Chapter
•The DHCP Setup screen (Section 5.2 on page 46) lets you enable, disable, and configure the DHCP server in the WiMAX Modem.
•The Sta tic DHCP sc reen (Section 5.3 on page 47) lets you assign specific IP addresses to specific computers on the LAN.
•The IP Alias screen (Section 5.4 on page 49) lets you add subnets on the LAN port. You can also control what routing information is sent and received by each subnet.
•The IP Static Route screen (Section 5.5 on page 51) lets you examine the static routes configured in the WiMAX Modem.
•The Other Settings screen (Section 5.6 on page 53) lets you control the routing information that is sent and received by each subnet assign specific IP addresses to specific computers on the LAN.
5.1.2 What You Need to Know
The following terms and concepts may help as you read through this chapter.
IP Address
User’s Guide
IP addresses identify individual devices on a network. Every networking device (including computers, servers, routers, printers, etc.) needs an IP address to
45
Chapter 5 The LAN Configuration Screens
communicate across the network. These networking devices are also known as hosts.
Subnet Masks
Subnet masks determine the maximum number of possible hosts on a network. You can also use subnet masks to divide one network into multiple sub-networks.
DNS
DNS (Domain Name System) is for mapping a domain name to its corresponding IP address and vice versa. The DNS server is extremely important because without it, you must know the IP address of a networking device before you can access it.
DHCP
A DHCP (Dynamic Host Configuration Protocol) server can assign your WiMAX Modem an IP address, subnet mask, DNS and other routing information when it’s turned on.
5.2 DHCP Setup
Click ADVANCED > LAN Configuration > DHCP Setup to enable, disable, and configure the DHCP server in the WiMAX Modem.
Figure 12 ADVANCED > LAN Configuration > DHCP Setup
46
User’s Guide
Chapter 5 The LAN Configuration Screens
The following table describes the labels in this screen.
Table 10 ADVA NCED > LAN Configuration > DHCP Setup
LABEL DESCRIPTION
DHCP Setup Enable DHCP
Server
IP Pool Starting Address
Pool Size Enter the number of IP addresses to allocate. This number must be at
DNS Server First, Second
and Third DNS Server
Select this if you want the WiMAX Modem to be the DHCP server on the LAN. As a DHCP server, the WiMAX Modem assigns IP addresses to DHCP clients on the LAN and provides the subnet mask and DNS server information.
Enter the IP address from which the WiMAX Modem begins allocating IP addresses, if you have not specified an IP address for this computer in ADVANCED > LAN Configuration > Static DHCP.
least one and is limited by a subnet mask of 255.255.255.0 (regardless of the subnet the WiMAX Modem is in). For example, if the IP Pool Start Address is 10.10.10.10, the WiMAX Modem can allocate up to
10.10.10.254, or 245 IP addresses.
Specify the IP addresses of a maximum of three DNS servers that the network can use. The WiMAX Modem provides these IP addresses to DHCP clients. You can specify these IP addresses two ways.
From ISP - provide the DNS servers provided by the ISP on the WAN port.
User Defined - enter a static IP address. DNS Relay - this setting will relay DNS information from the DNS
server obtained by the WiMAX Modem.
None - no DNS service will be provided by the WiMAX Modem. Apply Reset Click to restore your previously saved settings.
Click to save your changes.
5.3 Static DHCP
Click ADVANCED > LAN Configuration > Static DHCP to assign specific IP addresses to specific computers on the LAN.
User’s Guide
47
Chapter 5 The LAN Configuration Screens
Note: This screen has no effect if the DHCP server is not enabled. You can enable it
in ADVANCED > LAN Configuration > DHCP Setup.
Figure 13 ADVANCED > LAN Configuration > Static DHCP
The following table describes the labels in this screen.
Table 11 ADVANCED > LAN Configuration > Static DHCP
LABEL DESCRIPTION
# The number of the item in this list. MAC Address Enter the MAC address of the computer to which you want the WiMAX
Modem to assign the same IP address. IP Address Enter the IP address you want the WiMAX Modem to assign to the
computer. Apply Click to save your changes. Reset Click to restore your previously saved settings.
48
User’s Guide
5.4 IP Alias
Click ADVANCED > LAN Configuration > IP Alias to add subnets on the LAN port. You can also control what routing information is sent and received by each subnet.
Figure 14 ADVANCED > LAN Configuration> IP Alias
Chapter 5 The LAN Configuration Screens
User’s Guide
The following table describes the labels in this screen.
Table 12 ADVANCED > LAN Configuration> IP Alias
LABEL DESCRIPTION
IP Alias 1 Select this to add the specified subnet to the LAN port.
IP Address IP Subnet
Mask RIP
Direction
Enter the IP address of the WiMAX Modem on the subnet.
Enter the subnet mask of the subnet.
Use this field to control how much routing information the WiMAX
Modem sends and receives on the subnet.
None - The WiMAX Modem does not send or receive routing information on the subnet.
Both - The WiMAX Modem sends and receives routing information on the subnet.
In Only - The WiMAX Modem only receives routing information on the subnet.
Out Only - The WiMAX Modem only sends routing information on the subnet.
49
Chapter 5 The LAN Configuration Screens
Table 12 ADVANCED > LAN Configuration> IP Alias (continued)
LABEL DESCRIPTION
RIP Version Select which version of RIP the WiMAX Modem uses when it sends or
receives information on the subnet.
RIP-1 - The WiMAX Modem uses RIPv1 to exchange routing information.
RIP-2B - The WiMAX Modem broadcasts RIPv2 to exchange routing information.
RIP-2M - The WiMAX Modem multicasts RIPv2 to exchange routing information.
IP Alias 2
IP Address IP Subnet
Mask RIP
Direction
RIP Version Select which version of RIP the WiMAX Modem uses when it sends or
Select this to add the specified subnet to the LAN port. Enter the IP address of the WiMAX Modem on the subnet. Enter the subnet mask of the subnet.
Use this field to control how much routing information the WiMAX Modem sends and receives on the subnet.
None - The WiMAX Modem does not send or receive routing information on the subnet.
Both - The WiMAX Modem sends and receives routing information on the subnet.
In Only - The WiMAX Modem only receives routing information on the subnet.
Out Only - The WiMAX Modem only sends routing information on the subnet.
receives information on the subnet.
Apply Reset
RIP-1 - The WiMAX Modem uses RIPv1 to exchange routing information.
RIP-2B - The WiMAX Modem broadcasts RIPv2 to exchange routing information.
RIP-2M - The WiMAX Modem multicasts RIPv2 to exchange routing information.
Click to save your changes. Click to restore your previously saved settings.
50
User’s Guide
5.5 IP Static Route
Click ADVANCED > LAN Configuration > IP Static Route to look at the static routes configured in the WiMAX Modem.
Note: The first static route is the default route and cannot be modified or deleted. Figure 15 Advanced> LAN Configuration > IP Static Route
Chapter 5 The LAN Configuration Screens
The following table describes the icons in this screen.
Table 13 Advanced> LAN Configuration > IP Static Route
ICON DESCRIPTION
Edit Click to edit this item.
Delete Click to delete this item.
The following table describes the labels in this screen.
Table 14 Advanced> LAN Configuration > IP Static Route
LABEL DESCRIPTION
# The number of the item in this list. Name Active Destination
Gateway This field displays the IP address of the gateway to which the WiMAX
Apply Reset
This field displays the name that describes the static route. This field shows whether this static route is active (Yes) or not (No). This field displays the destination IP address(es) that this static route
affects.
Modem should send packets for the specified Destination. The gateway is a router or a switch on the same network segment as the device's LAN or WAN port. The gateway helps forward packets to their destinations.
Click to save your changes. Click to restore your previously saved settings.
User’s Guide
51
Chapter 5 The LAN Configuration Screens
5.5.1 IP Static Route Setup
Click an Edit icon in ADVANCED > LAN Configuration > IP Static Route to edit a static route in the WiMAX Modem.
Figure 16 Advanced> LAN Configuration > IP Static Route Setup
The following table describes the labels in this screen.
Table 15 Management > Static Route > IP Static Route > Edit
LABEL DESCRIPTION
Route Name Enter the name of the static route. Active Select this if you want the static route to be used. Clear this if you do
not want the static route to be used.
Private Select this if you do not want the WiMAX Modem to tell other routers
about this static route. For example, you might select this if the static route is in your LAN. Clear this if you want the WiMAX Modem to tell other routers about this static route.
Destination IP Address
IP Subnet Mask
Gateway IP Address
Metric
Enter one of the destination IP addresses that this static route affects.
Enter the subnet mask that defines the range of destination IP addresses that this static route affects. If this static route affects only one IP address, enter 255.255.255.255.
Enter the IP address of the gateway to which the WiMAX Modem should send packets for the specified Destination. The gateway is a router or a switch on the same network segment as the device's LAN or WAN port. The gateway helps forward packets to their destinations.
Usually, you should keep the default value. This field is related to RIP. The metric represents the "cost of transmission". A router determines
the best route for transmission by choosing a path with the lowest "cost". The smaller the metric, the lower the "cost". RIP uses hop count as the measurement of cost, where 1 is for a directly-connected network. The metric must be 1-15; if you use a value higher than 15, the routers assume the link is down.
52
User’s Guide
Table 15 Management > Static Route > IP Static Route > Edit (continued)
LABEL DESCRIPTION
Apply Click to save your changes. Cancel Click to return to the previous screen without saving your changes.
5.6 Other Settings
Click ADVANCED > LAN Configuration > Other Settings to set the RIP and Multicast options.
Figure 17 ADVANCED > LAN Configuration > Advanced
Chapter 5 The LAN Configuration Screens
The following table describes the labels in this screen.
Table 16 ADVANCED > LAN Configuration > Other Settings
LABEL DESCRIPTION
RIP & Multicast Setup RIP Direction Use this field to control how much routing information the WiMAX
Modem sends and receives on the subnet.
None - The WiMAX Modem does not send or receive routing information on the subnet.
Both - The WiMAX Modem sends and receives routing information on the subnet.
In Only - The WiMAX Modem only receives routing information on the subnet.
Out Only - The WiMAX Modem only sends routing information on the subnet.
RIP Version
Select which version of RIP the WiMAX Modem uses when it sends or receives information on the subnet.
RIP-1 - The WiMAX Modem uses RIPv1 to exchange routing information.
RIP-2B - The WiMAX Modem broadcasts RIPv2 to exchange routing information.
RIP-2M - The WiMAX Modem multicasts RIPv2 to exchange routing information.
User’s Guide
53
Chapter 5 The LAN Configuration Screens
Table 16 ADVANCED > LAN Configuration > Other Settings (continued)
LABEL DESCRIPTION
Multicast You do not have to enable multicasting to use RIP-2M. (See RIP
Version.)
Select which version of IGMP the WiMAX Modem uses to support multicasting on the LAN. Multicasting sends packets to some computers on the LAN and is an alternative to unicasting (sending packets to one computer) and broadcasting (sending packets to every computer).
None - The WiMAX Modem does not support multicasting.
IGMP-v1 - The WiMAX Modem supports IGMP version 1.
IGMP-v2 - The WiMAX Modem supports IGMP version 2.
Multicasting can improve overall network performance. However, it requires extra processing and generates more network traffic. In addition, other computers on the LAN have to support the same version
of IGMP. Apply Reset
Click to save your changes.
Click to restore your previously saved settings.
5.7 Technical Reference
The following section contains additional technical information about the WiMAX Modem features described in this chapter.
5.7.1 IP Address and Subnet Mask
Similar to the way houses on a street share a common street name, computers on a LAN share one common network number.
Where you obtain your network number depends on your particular situation. If the ISP or your network administrator assigns you a block of registered IP addresses, follow their instructions in selecting the IP addresses and the subnet mask.
If the ISP did not explicitly give you an IP network number, then most likely you have a single user account and the ISP will assign you a dynamic IP address when the connection is established. If this is the case, it is recommended that you select a network number from 192.168.0.0 to 192.168.255.0 and you must enable the Network Address Translation (NAT) feature of the WiMAX Modem. The Internet Assigned Number Authority (IANA) reserved this block of addresses sp ecifically for private use; please do not use any other number unless you are told otherwise. Let's say you select 192.168.1.0 as the network number; which covers 254 individual addresses, from 192.168.100.1 to 192.168.1.254 (zero and 255 are reserved). In other words, the first three numbers specify the network number while the last number identifies an individual computer on that network.
54
User’s Guide
Once you have decided on the network number, pick an IP address that is easy to remember, for instance, 192.168.100.1, for your WiMAX Modem, but make sure that no other device on your network is using that IP address.
The subnet mask specifies the network number portion of an IP address. Your WiMAX Modem will compute the subnet mask automatically based on the IP address that you entered. Y ou don't need to change the subnet mask computed by the WiMAX Modem unless you are instructed to do otherwise.
5.7.2 DHCP Setup
DHCP (Dynamic Host Configuration Protocol, RFC 2131 and RFC 2132) allows individual clients to obtain TCP/IP configuration at start-up from a server. You can configure the WiMAX Modem as a DHCP server or disable it. When configured as a server, the WiMAX Modem provides the TCP/IP configuration for the clients. If DHCP service is disabled, you must have another DHCP server on your LAN, or else each computer must be manually configured.
Chapter 5 The LAN Configuration Screens
The WiMAX Modem is pre-configured with a pool of IP addresses for the DHCP clients (DHCP Pool). See the product specif ic a t i o ns in the appendices. Do not assign static IP addresses from the DHCP pool to your LAN computers.
These parameters should work for the majority of installations. If your ISP gives you explicit DNS server address(es), see Section 5.3 on page 47.
5.7.3 LAN TCP/IP
The WiMAX Modem has built-in DHCP server capability that assigns IP addresses and DNS servers to systems that support DHCP client capability.
The LAN parameters of the WiMAX Modem are preset in the factory with the following values:
• IP address of 192.168.100.1 with subnet mask of 255.255.255.0 (24 bits)
• DHCP server enabled with 32 client IP addresses starting from 192.168.1.33. These parameters should work for the majority of installations. If your ISP gives
you explicit DNS server address(es), see Section 5.3 on page 47.
5.7.4 DNS Server Address
DNS (Domain Name System) is for mapping a domain name to its corresponding IP address and vice versa. The DNS server is extremely important because without it, you must know the IP address of a machine before you can access it.
User’s Guide
55
Chapter 5 The LAN Configuration Screens
The DNS server addresses that you enter in the DHCP setup are passed to the client machines along with the assigned IP address and subnet mask.
There are two ways that an ISP disseminates the DNS server addresses. The first is for an ISP to tell a customer the DNS server addresses, usually in the form of an information sheet, when s/he signs up. If your ISP gives you the DNS server addresses, enter them in the DNS Server fields in DHCP Setup, otherwise, leave them blank.
Some ISPs choose to pass the DNS servers using the DNS server extensions of PPP IPCP (IP Control Protocol) after the connection is up. If your ISP did not give you explicit DNS servers, chances are the DNS serv ers are conv eyed through IPCP negotiation. The WiMAX Modem supports the IPCP DNS server extensions through the DNS proxy feature.
If the Primary and Secondary DNS Server fields in the LAN Setup screen are not specified, for instance, left as 0.0.0.0, the WiMAX Modem tells the DHCP clients that it itself is the DNS server. When a computer sends a DNS query to the WiMAX Modem, the WiMAX Modem forwards the query to the real DNS server learned through IPCP and relays the response back to the computer.
Please note that DNS proxy works only when the ISP uses the IPCP DNS server extensions. It does not mean you can leave the DNS servers out of the DHCP setup under all circumstances. If your ISP gives you explicit DNS servers, make sure that you enter their IP addresses in the LAN Setup screen. This way, the WiMAX Modem can pass the DNS servers to the computers and the computers can query the DNS server directly without the WiMAX Modem’s intervention.
5.7.5 RIP Setup
RIP (Routing Information Protocol) allows a router to exchange routing information with other routers. The RIP Direction field controls the sending and receiving of RIP packets. When set to:
Both - the WiMAX Modem will broadcast its routing table periodically and incorporate the RIP information that it receives.
In Only - the WiMAX Modem will not send any RIP packets but will accept all RIP packets received.
Out Only - the WiMAX Modem will send out RIP packets but will not accept any RIP packets received.
None - the WiMAX Modem will not send any RIP packets and will ignore any RIP packets received.
56
The Version field controls the format and the broadcasting method of the RIP packets that the WiMAX Modem sends (it recog nizes both formats when receiving). RIP-1 is universally supported; but RIP-2 carries more information.
User’s Guide
RIP-1 is probably adequate for most networks, unless you have an unusual network topology.
Both RIP-2B and RIP-2M sends the routing data in RIP-2 format; the difference being that RIP-2B uses subnet broadcasting while RIP-2M uses multicasting.
5.7.6 Multicast
Traditionally, IP packets are transmitted in one of either two ways - Unicast (1 sender - 1 recipient) or Broadcast (1 sender - everybody on the network). Multicast delivers IP packets to a group of hosts on the network - not everybody and not just 1.
IGMP (Internet Group Multicast Protocol) is a network-layer protocol used to establish membership in a Multicast group - it is not used to carry user data. IGMP version 2 (RFC 2236) is an improvement over version 1 (RFC 1112) but IGMP version 1 is still in wide use. If you would like to read more detailed information about interoperability between IGMP version 2 and version 1, please see sections 4 and 5 of RFC 2236. The class D IP address is used to identify host groups and can be in the range 224.0.0.0 to 239.255.255.255. The address 224.0.0.0 is not assigned to any group and is used by IP multicast computers. The address
224.0.0.1 is used for query messages and is assigned to the permanent group of
all IP hosts (including gateways). All host s must join t he 224.0.0.1 group in order to participate in IGMP. The address 224.0.0.2 is assigned to the multicast routers group.
Chapter 5 The LAN Configuration Screens
The WiMAX Modem supports both IGMP version 1 (IGMP-v1) and IGMP version 2 (IGMP-v2). At start up, the WiMAX Modem queries all directly connected networks to gather group membership. After that, the WiMAX Modem periodically updates this information. IP multicasting can be enabled/disabled on the WiMAX Modem LAN and/or WAN interfaces in the web configurator (LAN; WAN). Select None to disable IP multicasting on these interfaces.
User’s Guide
57
Chapter 5 The LAN Configuration Screens
58
User’s Guide
CHAPTER 6
The WIFI Configuration Screen
6.1 Overview
Wi-Fi is a wireless networking technology and it is a synonym for wireless LAN. The blue circle marks a wireless LAN in the following figure. Wireless clients (A and B) connect to an access point (AP) to access other devices (such as the printer) or the Internet. Your WiMAX Modem works as an AP when you install a compatible WLAN card.
Figure 18 Example of a Wireless Network
Ethernet
AP
A
B
6.1.1 What You Can Do in the WIFI Screens
This chapter describes the WiMAX Modem’s Advanced ( 進階 ) > WIFI Configuration (WIFI 設定 ) screens. Use these screens to set up your WiMAX
Modem’s wireless connection.
User’s Guide
59
Chapter 6 The WIFI Configuration Screen
•Use the General screen (see Section 6.2 on page 63) to turn the wireless connection on or off, set up wireless security, configure the MAC filter, set up Quality of Service and make other basic configuration changes.
•Use the MAC Filter screen (see Section 6.3 on page 69) to configure a MAC (Media Access Control) address filter to restrict access to the wireless network.
You don’t necessarily need to use all these screens to set up your wireless connection. For example, you may just want to set up a network name, a wireless radio channel and some security in the AP screen.
6.1.2 What You Need to Know About WIFI
Wireless Basics
• Every device in the same wireless network must use the same Service Set IDentity (SSID).
The SSID is the name of the wireless network.
• If two wireless networks overlap, they should use different channels. Like radio stations or television channels, each wireless network uses a specific
channel, or frequency, to send and receive information.
Wireless Network Construction
Wireless networks consist of wireless clients, access points and bridges.
• A wireless client is a radio connected to a user’s computer.
• An access point is a radio with a wired connection to a network, which can connect with numerous wireless clients and let them access the network.
• A bridge is a radio that relays communications between access points and wireless clients, extending a network’s range.
Traditionally, a wireless network operates in one of two ways.
• An “infrastructure” type of network has one or more access points and one or more wireless clients. The wireless clients connect to the access points.
• An “ad-hoc” type of network is one in which there is no access point. Wireless clients connect to one another in order to exchange information.
Wired Equivalent Privacy (WEP)
60
WEP (Wired Equivalent Privacy) encrypts data transmitted between wired and wireless networks to keep the transmission private. Although one of the original wireless encryption protocols, WEP is also the weakest. Many people use it strictly to deter unintentional usage of their wireless network by outsiders.
Authentication Type
User’s Guide
Chapter 6 The WIFI Configuration Screen
The IEEE 802.11b/g standard describes a simple authentication method between the wireless stations and AP. Three authentication types are defined: Auto, Open and Shared. The WiMAX Modem supports the WEP (Open) and WEP (Shared) authentication types.
Open mode is implemented for ease-of-use and when security is not an issue. The wireless station and the AP or peer computer do not share a secret key. Thus the wireless stations can associate with any AP or peer computer and listen to any transmitted data that is not encrypted.
Shared mode involves a shared secret key to authenticate the wireless station to the AP or peer computer. This requires you to enable the wireless LAN security and use same settings on both the wireless station and the AP or peer computer.
Wi-Fi Protected Access (WPA)
WPA encrypts data transmitted between wired and wireless networks to keep the transmission private. It affords vastly stronger security than its lower-tier counterpart, WEP (Wired Equivalent Privacy). It comes in two different flavors: WPA and WPA2. Always try to use WPA2 as it implements the full version of the security standard while WPA does not.
WPA2
WPA2 (IEEE 802.11i) is a wireless security standard that defines stronger encryption, authentication and key management than WPA. It includes two data encryption algorithms, Temporal Key Integrity Protocol (TKIP) and Advanced Encryption Standard (AES) in the Counter mode with Cipher block chaining Message authentication Code Protocol (CCMP). WPA2 reduces the number of key exchange messages from six to four (CCMP 4-way handshake) and shortens the time required to connect to a network. Other WPA2 authentication features that are different from WPA include key caching and pre-authentication. These two features are optional and may not be implemented in all wireless devices. See also WPA.
Pre-Shared Key (PSK)
A pre-shared key is a password shared between the server and the client that unlocks the algorithm used to encrypt the data traffic between them. Without the proper password, the client and the server cannot communicate.
User’s Guide
61
Chapter 6 The WIFI Configuration Screen
Security
Security stops unauthorized devices from using the wireless network. It can also protect the information that is sent in the wireless network.Use the stron g es t security that every wireless client in the wireless network supports.
Table 17 Wireless Security Levels
SECURITY LEVEL
Weakest
SECURITY TYPE
No Security MAC Address Filtering WEP Encryption IEEE 802.1x EAP with RADIUS Server
Authentication WPA-PSK (Wi-Fi Protected Access Pre-Shared
Key) WPA (Wi-Fi Protected Access) WPA-PSK2 WPA2
Strongest
Note: WPA2 or WPA2-PSK security is recommended.
• WPA2-PSK and WPA-PSK do not employ user authentication and are known as the personal version of WPA.
• WEP is better than no security, but it is still possible for unauthorized devices to figure out the original information pretty quickly.
AES
Advanced Encryption Standard is method of data encryption that uses a secret key. AES may use a 128-bit, 192-bit or 256-bit key. AES is faster than 3DES.
TKIP
Temporal Key Integrity Protocol (TKIP) is an encryption protocol that uses 128-bit keys that are dynamically generated and distributed by the authentication server. TKIP regularly changes and rotates the encryption keys so that the same encryption key is never used twice.
62
MAC Address Filter
Every Ethernet device has a unique MAC (Media Access Control) address. The MAC address consists of twelve hexadecimal characters (0-9, and A to F), and it is usually written in the following form at: “0A:A0:00:BB:CC:DD”.
User’s Guide
The MAC address filter controls access to the wireless network. You can use the MAC address of each wireless client to allow or deny access to the wireless network.
Finding Out More
• See Chapter 3 on page 31 for a tutorial showing how to set up your wireless connection in an example scenario.
• See Section 6.4 on page 70 for advanced technical information on wireless networks.
6.1.3 Before You Start
Before you start using these screens, ask yourself the following questions. See
Section 6.1.2 on page 60 if some of the terms used here do not make sense to
you.
• What wireless standards do the other wireless devices support (IEEE 802.11g, for example)? What is the most appropriate standard to use?
Chapter 6 The WIFI Configuration Screen
• What security options do the other wireless devices support (WPA-PSK, for example)? What is the best one to use?
• Do the other wireless devices support WPS (Wi-Fi Protected Setup)? If so, you can set up a well-secured network very easily.
Even if some of your devices support WPS and some do not, you can use WPS to set up your network and then add the non-WPS devices manually, although this is somewhat more complicated to do.
• What advanced options do you want to configure, if any? If you want to configure advanced options such as Qualit y of Service, ensure that you know precisely what you want to do. If you do not want to configure advanced options, leave them alone.
6.2 General Screen
Note: If you are configuring the WiMAX Modem from a computer connected to the
wireless LAN and you change the WiMAX Modem’s SSID or security settings, you will lose your wireless connection when you press Apply (套用) to confirm. You must then change the wireless settings of your computer to match the WiMAX Modem’s new settings.
User’s Guide
63
Chapter 6 The WIFI Configuration Screen
Click Advanced (進階) > WIFI Configuration (WIFI設定) to open the General screen.
Figure 19 Advanced ( 進階 ) > WIFI Configuration (WIFI 設定 ) > General
The following table describes the labels in this screen.
Table 18 Advanced ( 進階 ) > WIFI Configuration (WIFI設定 ) > General
LABEL DESCRIPTION
Active Wireless LAN ( 啟用無線區域 網路 )
Network Name (SSID) ( 名稱 )
Click the check box to activate wireless LAN.
The SSID (Service Set IDentity) identifies the service set with which a wireless device is associated. Wireless devices associating to the access point (AP) must have the same SSID. Enter a descriptive name (up to 32 printable 7-bit ASCII characters) for the wireless LAN.
Note: If you are configuring the WiMAX Modem from a computer
connected to the wireless LAN and you change the WiMAX Modem’s SSID or WEP settings, you will lose your wireless connection when you press Apply ( 套用 ) to confirm. You must then change the wireless settings of your computer to match the WiMAX Modem’s new settings.
Hide SSID ( 隱藏 SSID)
Channel Selection ( 道選擇 )
Security Mode ( 安全模 )
Apply ( 套用 ) Click Apply ( 套用 ) to save your changes back to the WiMAX Modem.
Select this check box to hide the SSID in the outgoing beacon frame so a station cannot obtain the SSID through scanning using a site survey tool.
Select this option and set the operating frequency/channel depending on your particular region. Select a channel from the drop-down list box.
See the following sections for more details about this field.
64
User’s Guide
T able 18 Advanced ( 進階 ) > WIFI Configuration (WIFI設定 ) > General (continued)
LABEL DESCRIPTION
Cancel (取消) Click Cancel ( 取消 ) to reload the previous configuration for this screen. Advanced
Setup (進階模 )
6.2.1 No Security
Select No Security in the Security Mode ( 安全模式 ) field to allow wireless devices to communicate with the access points without any data encryption.
Note: If you do not enable any wireless security on your WiMAX Modem, your network
is accessible to any wireless networking device that is within range.
Figure 20 Advanced (進階) > WIFI Configuration (WIFI設定) > General: No Security
Chapter 6 The WIFI Configuration Screen
Click Advanced Setup ( 進階模式 ) to display the Wireless Advanced Setup screen and edit more details of your WLAN setup.
User’s Guide
65
Chapter 6 The WIFI Configuration Screen
6.2.2 WEP Encryption
In order to configure and enable WEP encryption; click Advanced (進階 ) > WIFI Configuration (WIFI 設定 ) > General to display the General screen. Select WEP (OPEN) or WEP (SHARED) from the Security Mode ( 安全模式 ) list.
Figure 21 Advanced ( 進階 ) > WIFI Configuration (WIFI設定 ) > General: WEP
(OPEN) / WEP (SHARED)
The following table describes the wireless LAN security labels in this screen.
Table 19 Advanced ( 進階 ) > WIFI Configuration (WIFI 設定 ) > General: WEP (OPEN) / WEP (SHARED)
LABEL DESCRIPTION
Security Mode ( 安全模 )
WEP Key The WEP key is used to encrypt data. Both the WiMAX Modem and the
Choose WEP (OPEN) or WEP (SHARED) from the drop-down list box.
wireless stations must use the same WEP key for data transmission. If you want to manually set the WEP key, enter any 5 or 13 characters
(ASCII string) or 10 or 26 hexadecimal characters ("0-9", "A-F") for a 64­bit or 128-bit WEP key respectively.
6.2.3 WPA(2)-PSK
In order to configure and enable WPA(2)-PSK authentication; click Advanced ( 進) > WIFI Configuration (WIFI 設定 ) to display the General screen. Select
66
User’s Guide
Chapter 6 The WIFI Configuration Screen
WPA-PSK (AES), WPA2-PSK (AES), WPA-PSK (TKIP), or WPA2-PSK (TKIP) from the Security Mode ( 安全模式 ) list.
Figure 22 Advanced ( 進階 ) > WIFI Configuration (WIFI設定 ) > General: WPA(2)-
PSK (AES/TKIP)
The following table describes the wireless LAN security labels in this screen.
T able 20 Advanced (進階) > WIFI Configuration (WIFI設定) > General: WPA(2)-PSK (AES/TKIP)
LABEL DESCRIPTION
Security Mode ( 安全模式 )
Pre-Shared Key The encryption mechanisms used for WPA(2) and WPA(2)-PSK are
Choose WPA-PSK (AES), WPA2-PSK (AES), WPA-PSK (TKIP), or WPA2-PSK (TKIP) from the drop-down list box.
the same. The only difference between the two is that WPA(2)-PSK uses a simple common password, instead of user-specific credentials.
Type a pre-shared key from 8 to 63 case-sensitive ASCII characters (including spaces and symbols).
User’s Guide
67
Chapter 6 The WIFI Configuration Screen
6.2.4 Wireless LAN Advanced Setup
To configure advanced wireless settings, click the Advanced Setup ( 進階模式 ) button in the General screen. The screen appears as shown.
Figure 23 Advanced(進階) > WIFI Configuration(WIFI設定) > General > Advanced
Setup ( 進階模式 )
The following table describes the labels in this screen.
Table 21 Advanced( 進階 ) > WIFI Configuration(WIFI 設定 ) > General( 一般 ) > Advanced Setup ( 進階模式 )
LABEL DESCRIPTION
Wireless Advanced Setup RTS/CTS
Threshold Fragmentation
Threshold Preamble Select a preamble type. Choices are Long, Short or Dynamic. The
802.11 Mode Select 802.11b Only to allow only IEEE 802.11b compliant WLAN devices
Apply ( 套用 ) Click Apply ( 套用 ) to save your changes back to the WiMAX Modem. Cancel ( 重設 ) Click Cancel ( 重設 ) to reload the previous configuration for this screen. Back ( 上一步 ) Click this to return to the previous screen without saving changes.
Enter a value between 0 and 2432.
It is the maximum data fragment size that can be sent. Enter a value between 256 and 2432.
default setting is Long. See the appendix for more information.
to associate with the WiMAX Modem. Select 802.11g Only to allow only IEEE 802.11g compliant WLAN devices
to associate with the WiMAX Modem. Select Mixed to allow either IEEE 802.11b or IEEE 802.11g compliant
WLAN devices to associate with the WiMAX Modem. The transmission rate of your WiMAX Modem might be reduced.
68
User’s Guide
6.3 MAC Filter
Use this screen to change your WiMAX Modem’s MAC filter settings. Click Advanced (進階) > WIFI Configuration (WIFI設定) > MAC Filter. The screen appears as shown.
Figure 24 Advanced ( 進階 ) > WIFI Configuration (WIFI設定 ) > MAC Filter
Chapter 6 The WIFI Configuration Screen
User’s Guide
69
Chapter 6 The WIFI Configuration Screen
The following table describes the labels in this screen.
Table 22 Advanced( 進階 ) > WIFI Configuration(WIFI 設定 ) > MAC Filter
LABEL DESCRIPTION
Active MAC Filter ( 啟用 MAC 位址過 )
Filter Action ( 過濾動作 )
Set ( 設定 )
MAC Address (MAC 位址 )
Apply (套用) Click Apply ( 套用 ) to save your changes back to the WiMAX Modem. Cancel (
)
Select the check box to enable MAC address filtering.
Define the filter action for the list of MAC addresses in the MAC Address table.
Select Allow (允許) to permit access to the WiMAX Modem, MAC addresses not listed will be denied access to the WiMAX Modem.
Select Deny ( 拒絕 ) to block access to the WiMAX Modem, MAC addresses not listed will be allowed to access the WiMAX Modem.
This is the index number of the MAC address. Enter the MAC addresses of the wireless devices that are allowed or denied
access to the WiMAX Modem in these address fields. Enter the MAC addresses in a valid MAC address format, that is, six hexadecimal character pairs, for example, 12:34:56:78:9a:bc.
Click Cancel ( 重設 ) to reload the previous configuration for this screen.
6.4 Wireless LAN Technical Reference
This section discusses wireless LANs in depth. For more information, see the appendix.
70
User’s Guide
6.4.1 Additional Wireless Terms
The following table describes some wireless network terms and acronyms used in the WiMAX Modem’s Web Configurator.
Table 23 Additional Wireless Terms
TERM DESCRIPTION
RTS/CTS Threshold In a wireless network which covers a large area, wireless devices
are sometimes not aware of each other’s presence. This may cause them to send information to the AP at the same time and result in information colliding and not getting through.
By setting this value lower than the default value, the wireless devices must sometimes get permission to send information to the WiMAX Modem. The lower the value, the more often the devices must get permission.
If this value is greater than the fragmentation threshold value (see below), then wireless devices never have to get permission to send information to the WiMAX Modem.
Preamble A preamble affects the timing in your wireless network. There are
two preamble modes: long and short. If a device uses a different preamble mode than the WiMAX Modem does, it cannot communicate with the WiMAX Modem.
Authentication The process of verifying whether a wireless device is allowed to use
the wireless network.
Fragmentation Threshold
A small fragmentation threshold is recommended for busy networks, while a larger threshold provides faster performance if the network is not very busy.
Chapter 6 The WIFI Configuration Screen
6.4.2 Wireless Security Overview
The following sections introduce different types of wireless s ecurity you can set up in the wireless network.
6.4.2.1 SSID
Normally , the WiMAX Modem acts lik e a beacon and regularly broadcasts the SSID in the area. Yo u can hide the S SID instead, in which case the WiMAX Modem does not broadcast the SSID. In addition, you should change the default SSID to something that is difficult to guess.
This type of security is fairly weak, however, because there are ways for unauthorized wireless devices to get the SSID. In addition, unauthorized wireless devices can still see the in formation that is sent in the wireless network.
6.4.2.2 MAC Address Filter
Every device that can use a wireless network has a unique identification number, called a MAC address.
1
A MAC address is usually written using twelve hexadecimal
User’s Guide
71
Chapter 6 The WIFI Configuration Screen
characters2; for example, 00A0C5000002 or 00:A0:C5:00:00:02. To get the MAC address for each device in the wireless network, see the device’s User’s Guide or other documentation.
You can use the MAC address filter to tell the WiMAX Modem which devices are allowed or not allowed to use the wireless network. If a device is allowed to use the wireless network, it still has to have the correct information (SSID, channel, and security). If a device is not allowed to use the wireless network, it does not matter if it has the correct information.
This type of security does not protect the inf o rm at ion that is sent in the wireless network. Furthermore, there are ways f or unauthorized wireless devices to get the MAC address of an authorized device. Then, they can use that MAC address to use the wireless network.
6.4.2.3 User Authentication
Authentication is the process of verifying whether a wireless device is allowed to use the wireless network. Y ou can make every user log in to the wireless network before they can use it. However, every device in the wireless network has to support IEEE 802.1x to do this.
For wireless networks, you can store the user names and passwords for each user in a RADIUS server . This is a server used in businesses more than in homes. If you do not have a RADIUS server, you cannot set up user names and passwords for your users.
Unauthorized wireless devices can still see the information that is sent in the wireless network, even if they cannot use the wireless network. Furthermore, there are ways for unauthorized wireless users to get a valid user name and password. Then, they can use that user name and password to use the wireless network.
6.4.2.4 Encryption
Wireless networks can use encryption to protect the informat ion that is sent in the wireless network. Encryption is like a secret code. If you do not know the secret code, you cannot understand the message.
72
1. Some wireless devices, such as scanners, can detect wireless networks but cannot use wireless networks. These kinds of wireless devices might not have MAC addresses.
2. Hexadecimal characters are 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, A, B, C, D, E, and F.
User’s Guide
Chapter 6 The WIFI Configuration Screen
The types of encryption you can choose depend on the type of authentication. (See Section 6.4.2.3 on page 72 for information about this.)
Table 24 Types of Encryption for Each Type of Authentication
NO AUTHENTICATION RADIUS SERVER
Weakest No Security
Static WEP WPA-PSK
WPA
Strongest WPA2-PSK WPA2
For example, if the wireless network has a RADIUS server, you can choose WPA or WPA2. If users do not log in to the wireless network, you can choose no encryption, Static WEP, WPA-PSK, or WPA2-PSK.
Usually, you should set up the strongest encryption that every device in the wireless network supports. For example, suppose you have a wireless network with the WiMAX Modem and you do not have a RADIUS serv er. Therefore, there is no authentication. Suppose the wireless network has two devices. Device A only supports WEP, and device B supports WEP and WPA. Therefore, you should set up Static WEP in the wireless network.
Note: It is recommended that wireless networks use WPA-PSK, WPA, or stronger
encryption. The other types of encryption are better than none at all, but it is still possible for unauthorized wireless devices to figure out the original information pretty quickly.
When you select WPA2 or WPA2-PSK in your WiMAX Modem, you can also select an option (WPA compatible) to support WPA as well. In this case, if some of the devices support WPA and some support WPA2, you should set up WPA2-PSK or
WPA2 (depending on the type of wireless network login) and select the WPA compatible option in the WiMAX Modem.
Many types of encryption use a key to protect the information in the wireless network. The longer the key, the stronger the encryption. Every device in the wireless network must have the same key.
6.4.3 MBSSID
Traditionally, you needed to use different APs to configure different Basic Service Sets (BSSs). As well as the cost of buying extr a APs, there w as also the possibilit y of channel interference. The WiMAX Modem’s MBSSID (Multiple Basic Service Set IDentifier) function allows you to use one access point to provide several BSSs simultaneously. You can then assign varying QoS priorities and/or security modes to different SSIDs.
User’s Guide
73
Chapter 6 The WIFI Configuration Screen
Wireless devices can use different BSSIDs to associate with the same AP.
6.4.3.1 Notes on Multiple BSSs
• A maximum of eight BSSs are allowed on one AP simultaneously.
• You must use different keys for different BSSs. If two wireless devices have different BSSIDs (they are in different BSSs), but have the same keys, they may hear each other’s communications (but not communicate with each other).
• MBSSID should not replace but rather be used in conjunction with 802.1x security.
6.4.4 Wireless Distribution System (WDS)
The WiMAX Modem can act as a wireless network bridge and establish WDS (Wireless Distribution System) links with other APs. You need to know the MAC addresses of the APs you want to link to. Once the security settings of peer sides match one another, the connection between devices is made.
At the time of writing, WDS security is compatible with other ZyXEL access points only. Refer to your other access point’s documentation for details.
The following example illustrates how WDS link works between APs. Notebook computer A is a wireless client connecting to access point AP 1. AP 1 has no wired Internet connection, but can establish a WDS link with access point AP 2, which does. When AP 1 has a WDS link with AP 2, the notebook computer can access the Internet through AP 2.
Figure 25 WDS Link Example
A
AP 1
6.4.5 WiFi Protected Setup
Your WiMAX Modem supports WiFi Protected Setup (WPS), which is an easy w ay to set up a secure wireless network. WPS is an industry standard specification, defined by the WiFi Alliance.
WPS allows you to quickly set up a wireless network with strong security, without having to configure security settings manually. Each WPS connection works between two devices. Both devices must support WPS (check each device’s documentation to make sure).
WDS
AP 2
74
User’s Guide
Depending on the devices you have, you can either press a button (on the device itself , or in its configuration utility) or enter a PIN (a unique P ersonal Identification Number that allows one device to authenticate the other) in each of the two devices. When WPS is activated on a device, it has two minutes to find another device that also has WPS activated. Then, the two devices connect and set up a secure network by themselves.
6.4.5.1 Push Button Configuration
WPS Push Button Configuration (PBC) is in itiated by pressing a button on each WPS-enabled device, and allowing them to connect automatically. You do not need to enter any information.
Not every WPS-enabled device has a physical WPS button. Some may have a WPS PBC button in their configuration utilities instead of or in addition to the physical button.
Take the following steps to set up WPS using the button.
Chapter 6 The WIFI Configuration Screen
1 Ensure that the two devices you want to set up are within wireless range of one
another.
2 Look for a WPS button on each device. If the device does not have one, log into its
configuration utility and locate the button (see the device’s User’ s Guide for how to do this). The WiMAX Modem’s WPS button is in the rear panel as shown next.
Figure 26 The WPS Button on the WiMAX Modem
3 Press the button on one of the devices (it doesn’t matter which). For the WiMAX
Modem you must press the WPS button for more than three seconds.
4 Within two minutes, press the button on the other device. The registrar sends the
network name (SSID) and security key throug h an secure connection to the enrollee.
User’s Guide
If you need to make sure that WPS worked, check the list of associated wireless clients in the AP’s configuration utility. If you see the wireless client in the list, WPS was successful.
75
Chapter 6 The WIFI Configuration Screen
76
User’s Guide
CHAPTER 7
The WAN Configuration Screens
7.1 Overview
Use the ADVANCED > WAN Configuration screens to set up your WiMAX Modem’s Wide Area Network (WAN) or Internet features.
A Wide Area Network (or WAN) links geographically dispersed locations to other networks or the Internet. A WAN configuration can include switched and permanent telephone circuits, terrestrial radio systems and satellite systems.
7.1.1 What You Can Do in This Chapter
•The Internet Connection screen (Section 7.2 on page 79) lets you set up your WiMAX Modem’s Internet settings.
•The W iMAX Configuration screen (Section 7.3 on page 82) lets set up the frequencies used by your WiMAX Modem.
7.1.2 What You Need to Know
The following terms and concepts may help as you read through this chapter.
WiMAX
WiMAX (Worldwide Interoperability for Microwave Access) is the IEEE 802.16 wireless networking standard, which provides high-bandwidth, wide-range wireless service across wireless Metropolitan Area Networks (MANs). ZyXEL is a member of the WiMAX Forum, the industry group dedicated to promoting and certifying interoperability of wireless broadband products.
In a wireless MAN, a wireless-equipped computer is known either as a mobile station (MS) or a subscriber station (SS). Mobile stations use the IEEE 802.16e standard and are able to maintain connectivity while switching their connection from one base station to another base station (handover) while subscriber stations use other standards that do not have this capability (IEEE 802.16-2004, for
User’s Guide
77
Chapter 7 The WAN Configuration Screens
example). The following figure shows an MS-equipped notebook computer MS1 moving from base station BS1’s coverage area and connecting to BS2.
Figure 27 WiMax: Mobile Station
WiMAX technology uses radio signals (around 2 to 10 GHz) to connect subscriber stations and mobile stations to local base stations. Numerous subscriber stations and mobile stations connect to the network through a singl e base station ( BS), as in the following figure.
Figure 28 WiMAX: Multiple Mobile Stations
A base station's coverage area can extend over many hundreds of meters, even under poor conditions. A base station provides network access to subscriber stations and mobile stations, and communicates with other base stations.
The radio frequency and bandwidth of the link between t he WiMAX Modem and the base station are controlled by the base station. The WiMAX Modem follows the base station’s configur ation.
Authentication
When authenticating a user, the base station uses a third-party RADIUS or Diameter server known as an AAA (Authentication, Authorizat ion and Ac counting) server to authenticate the mobile or subscriber stations.
78
User’s Guide
Chapter 7 The WAN Configuration Screens
The following figure shows a base station using an AAA server to authenticate mobile station MS, allowing it to access the Internet.
Figure 29 Using an AAA Server
In this figure, the dashed arrow shows the PKM (Privacy Key Management) secured connection between the mobile station and the base station, and the solid arrow shows the EAP secured connection between the mobile station, the base station and the AAA server. See the WiMAX security appendix for more details.
7.2 Internet Connection
Click ADVANCED ( 進階 ) > WAN Configuration (WAN 設定 ) to set up your WiMAX Modem’s Internet settings.
User’s Guide
79
Chapter 7 The WAN Configuration Screens
Note: Not all WiMAX Modem models have all the fields shown here. Figure 30 ADVANCED ( 進階 ) > WAN Configuration (WAN 設定 ) > Internet
Connection
The following table describes the labels in this screen.
Table 25 ADVANCED ( 進階 ) > WAN Configuration (WAN 設定 ) > Internet Connection > ISP Parameters for Internet Access ()
LABEL DESCRIPTION
ISP Parameters for Internet Access (存取網際網路的 ISP 參數 ) User (使用者名稱) Use this field to enter the username associated with your Internet
access account. You can enter up to 61 printable ASCII characters.
Password ( 密碼 ) Use this field to enter the password associated with your Internet
access account. You can enter up to 47 printable ASCII characters.
Anonymous Identity ( 匿名身 )
PKM This field displays the Privacy Key Management version number.
Enter the anonymous identity provided by your Internet Service Provider. Anonymous identity (also known as outer identity) is used with EAP-TT LS encryption. The anonymous identity is used to route your authentication request to the correct authentication server, and does not reveal your real user name. Your real user name and password are encrypted in the TLS tunnel, and only the anonymous identity can be seen.
Leave this field blank if your ISP did not give you an anonymous identity to use.
PKM provides security between the WiMAX Modem and the base station. At the time of writing, the WiMAX Modem supports PKMv2 only. See the WiMAX security appendix for more information.
80
User’s Guide
Chapter 7 The WAN Configuration Screens
Table 25 ADVANCED ( 進階 ) > WAN Configuration (WAN 設定 ) > Internet Connection > ISP Parameters for Internet Access () (continued)
LABEL DESCRIPTION
Authentication ( 認證 )
This field displays the user authentication method. Authentication is the process of confirming the identity of a mobile station (by means of a username and password, for example).
Check with your service provider if you are unsure of the correct setting for your account.
Choose from the following user authentication methods:
TTLS (Tunnelled Transport Layer Security)
TLS (Transport Layer Security)
Note: Not all WiMAX Modems support TLS authentication.
Check with your service provider for details.
TTLS Inner EAP This field displays the type of secondary authentication method.
Once a secure EAP-TTLS connection is established, the inner EAP is the protocol used to exchange security information between the mobile station, the base station and the AAA server to authenticate the mobile station. See the WiMAX security appendix for more details.
This field is available only when TTLS is selected in the Authentication field.
The WiMAX Modem supports the following inner authentication types:
CHAP (Challenge Handshake Authentication Protocol)
MSCHAP (Microsoft CHAP)
MSCHAPV2 (Microsoft CHAP version 2)
PAP (Password Authentication Protocol)
Auth Mode ( 認證 模式 )
Certificate (憑證) This is the security certificate the WiMAX Modem uses to
WAN IP Address Assignment ( 指定 WAN IP 位址 ) Get
automatically from ISP (Default) ( 自動從 ISP 取得 ( 預設 ))
Select the authentication mode from the drop-down list box. This field is not ava i l a ble in al l W i MA X Mo d e ms . Ch e c k wit h y o u r
service provider for details. The WiMAX Modem supports the following authentication modes:
•User Only
• Device Only with Cert
• Certs and User Authentication
authenticate the AAA server. Use the TOOLS ( 工具 ) > Certificate ( 憑證 ) > Trusted CAs screen to import certificates to the WiMAX Modem.
Select this if you have a dynamic IP address. A dynamic IP address is not fixed; the ISP assigns you a different one each time you connect to the Internet.
User’s Guide
81
Chapter 7 The WAN Configuration Screens
Table 25 ADVANCED ( 進階 ) > WAN Configuration (WAN 設定 ) > Internet Connection > ISP Parameters for Internet Access () (continued)
LABEL DESCRIPTION
Use Fixed IP Address ( 使用固 IP 位址 )
IP Subnet Mask (IP 子網路遮罩 )
Gateway IP Address ( 閘道 IP 位址 )
Apply ( 套用 ) Click to save your changes. Reset ( 重設 ) Click to restore your previously saved settings.
A static IP address is a fixed IP that your ISP gives you. Type your ISP assigned IP address in the IP Address (IP 位址 ) field below.
Enter a subnet mask in dotted decimal notation. Refer to the appendices to calculate a subnet mask If you are
implementing subnetting. Specify a gateway IP address (supplied by your ISP).
7.3 WiMAX Configuration
Click ADVANCED ( 進階 ) > WAN Configuration (WAN 設定 ) > WiMAX Configuration to set up the frequencies used by your WiMAX Modem.
In a WiMAX network, a mobile or subscriber station must use a radio frequency supported by the base station to communicate. When the WiMAX Modem looks for a connection to a base station, it can search a range of frequencies .
82
User’s Guide
Chapter 7 The WAN Configuration Screens
Radio frequency is measured in Hertz (Hz).
Table 26 Radio Frequency Conversion
1 kHz = 1000 Hz
1 MHz = 1000 kHz (1000000 Hz)
1 GHz = 1000 MHz (1000000 kHz)
Figure 31 ADVANCED ( 進階 ) > WAN Configuration (WAN 設定 ) > WiMAX
Configuration (WiMAX 設定 )
User’s Guide
83
Chapter 7 The WAN Configuration Screens
The following table describes the labels in this screen.
Table 27 ADVANCED ( 進階 ) > WAN Configuration (WAN 設定 ) > WiMAX Configuration (WiMAX 設定 )
LABEL DESCRIPTION
Bandwidth & Frequency ( 頻寬 & 頻率 )
These fields show the downlink frequency settings in kilohertz (kHz).
Enter the width of a frequency band (only support 5MHz & 10MHz) the WiMAX Modem can use for
transmitting and receiving data.
Enter values in the Frequency ( Modem scan these frequencies for available channels in ascending numerical order.
Contact your service provider for the bandwidth value and the supported frequencies.
Network Access Provider ID (網路接 取提供者 ID)
Base Station ( 基地 )
Enabling Functions ( 功能啟用 )
Apply ( 套用 ) Click to save your changes.
et ( 重設 ) Click to restore your previously saved settings.
Res
Enter the primary ( connection. You can also enter the substitude access provider IDs for the connection backup when the primary one is down.
Select ALU to connect this WiMAX Modem to an Alcatel-Lucent WiMAX base station.
Select NEC to connect this WiMAX Modem to a NEC WiMAX base station.
Select one or multiple check box(es) to enable the function(s). Configure this according to what you were given by your service provider.
HARQ: Select this to enable the Hybrid Automatic Repeat- Request feature on the WiMAX Modem. HARQ works in the physical (PHY) layer and provides radio link error detection and correction.
ARQ: Select on the WiMAX Modem. ARQ works in the MAC layer and provides error correction by scheduling re-transmission.
Both HARQ and ARQ are designed to provide reliable transmission over a wireless connection. When a receiver detects errors, it will notify the sender to retransmit the data within a certain period.
MIMO: Select this to enable the Multple Input Multiple Ouput (MIMO) feature on the WiMAX Modem.
Idle_Mode: Select this to have the WiMAX Modem enter the idle mode after it has no traffic passing through for a pre-defined period. Make sure your base station also supports this before selecting this.
要的 ) network access provider ID for the WAN
this to enable the Automatic Repeat-Request feature
) fields to have the WiMAX
84
User’s Guide
7.3.1 Frequency Ranges
The following figure shows the WiMAX Modem searching a range of frequencies to find a connection to a base station.
Figure 32 Frequency Ranges
In this figure, A is the WiMAX frequency range. “WiMAX frequency r ange” refers to the entire range of frequencies the WiMAX Modem is ca pable of using to transmit and receive (see the Product Specifications appendix for details).
Chapter 7 The WAN Configuration Screens
In the figure, B shows the operator frequency range. This is the range of frequencies within the WiMAX frequency range supported by your operator (service provider).
The operator range is subdivided into bandwidth steps. In the figure, each C is a bandwidth step.
The arrow D shows the WiMAX Modem searching for a connection.
Have the WiMAX Modem search only certain frequencies by configuring the downlink frequencies. Your operator can give you information on the supported frequencies.
The downlink frequencies are points of the frequency range your WiMAX Modem searches for an available connection. Use the Site Survey screen to set these bands. You can set the downlink frequencies anywhere within the WiMAX frequency range. In this example, the downlink frequencies have been set to search all of the operator range for a connection.
7.3.2 Configuring Frequency Settings
User’s Guide
You need to set the WiMAX Modem to scan one or more specific radio frequencies to find an available connection to a WiMAX base station.
Use the WiMAX Configuration (WiMAX 設定 ) screen to define the radio frequencies to be searched for available wireless connections. See Section 7.3.3
on page 86 for an example of using the WiMAX Configuration (WiMAX 設定 )
screen.
85
Chapter 7 The WAN Configuration Screens
Note: It may take several minutes for the WiMAX Modem to find a connection.
• The WiMAX Modem searches the DL Frequency ( 頻率 ) settings in ascending numerical order, from [1] to [9].
• If you enter a 0 in a DL Frequency (頻率) field, the WiMAX Modem immediately moves on to the next DL Frequency ( 頻率 ) field.
• When the WiMAX Modem connects to a base station, the values in this screen are automatically set to the base station’s frequency. The next time the WiMAX Modem searches for a connection, it searches only this frequency. If you want the WiMAX Modem to search other frequencies , e nt er th em in the DL Frequency ( 頻率 ) fields.
The following table describes some examples of DL Frequency ( 頻率 ) settings.
Table 28 DL Frequency Example Settings
EXAMPLE 1 EXAMPLE 2
DL Frequency [1] ( 頻率 [1]):
DL Frequency [2] ( 頻率 [2]):
DL Frequency [3] ( 頻率 [3]):
DL Frequency [4] ( 頻率 [4]):
2500000 2500000
2550000 2550000
0 2600000
00
The WiMAX Modem searches at 2500000 kHz, and then searches at 2550000 kHz if it has not found a connection.
The WiMAX Modem searches at 2500000 kHz and then at 2550000 kHz if it has not found an available connection. If it still does not find an available connection, it searches at 2600000 kHz.
7.3.3 Using the WiMAX Frequency Screen
In this example, your Internet service provider has given you a list of supported frequencies: 2.51, 2.525, 2.6, and 2.625.
1 In the DL Frequency [1] (頻率[1]) field, enter 2510000 (2510000 kilohertz
(kHz) is equal to 2.51 gigahertz).
2 In the DL Frequency [2] ( 頻率 [2]) field, enter 2525000.
3 In the DL Frequency [3] (頻率[3]) field, enter 2600000.
4 In the DL Frequency [4] (頻率[4]) field, enter 2625000.
Leave the rest of the DL Frequency ( 頻率 ) fields at zero.
86
User’s Guide
Chapter 7 The WAN Configuration Screens
5 Enter the ID of your service provider you were given in the Service Provider ID
[1] ( 提供者 ID[1]) field.
6 Configure the Base Station ( 基地台 ) (ALU in this example) and Function
Enabling ( 功能啟動 ) (All of the four options are selected in this example) fields.
The screen appears as follows.
Figure 33 Completing the WiMAX Frequency Screen
7 Click Apply ( 套用 ). The WiMAX Modem stores your settings.
User’s Guide
When the WiMAX Modem searches for available frequencies, it scans all frequencies from DL Frequency [1] (頻率[1]) to DL Frequency [4] (頻率[4]). When it finds an avai lable connection, the fi elds in this screen will be automatically set to use that frequency.
87
Chapter 7 The WAN Configuration Screens
88
User’s Guide
CHAPTER 8
The NAT Configuration Screens
8.1 Overview
Use these screens to configure port forwarding and trigger ports for the WiMAX Modem. You can also enable and disable SIP, FTP, and H.323 ALG.
Network Address Translation (NAT) maps a host’s IP address within one network to a different IP address in another network. For example, you can use a NAT router to map one IP address from your ISP to multiple private IP addresses for the devices in your home network.
8.1.1 What You Can Do in This Chapter
•The General screen (Section 8.2 on page 90) lets you enable or disable NAT and to allocate memory for NAT and firewall rules.
•The Port Forwarding screen (Section 8.3 on page 91) lets you look at the current port-forwarding rules in the WiMAX Modem, and to enable, disable, activate, and deactivate each one.
•The Trigger Port screen (Section 8.4 on page 94) lets you maintain trigger port forwarding rules for the WiMAX Modem.
User’s Guide
89
Chapter 8 The NAT Configuration Screens
8.2 General
Click ADVANCED (進階) > NAT Configuration (NAT設定) > General to enable or disable NA T and to allocate memory for NAT and firewall rules.
Figure 34 ADVANCED ( 進階 ) > NAT Configuration (NAT 設定 ) > General
The following table describes the labels in this screen.
Table 29 ADVANCED ( 進階 ) > NAT Configuration (NAT 設定 ) > General
LABEL DESCRIPTION
Enable Network Address Translation ( 啟用網路位址轉譯 )
Max NAT/Firewall Session Per User (
一使用者的 NAT/ 防火 牆 最大連線數 )
Apply ( 套用 ) Cancel ( 重設 ) Click to return to the previous screen without saving your
Select this if you want to use port forwarding, trigger ports, or any of the ALG.
When computers use peer to peer applications, such as file sharing applications, they may use a large number of NAT sessions.
client can establish, this can result in all of the available NAT sessions being used. In this case, no additional NAT sessions can be established, and users may not be able to access the Internet.
Each NAT session establishes a corresponding firew all session. Use this field to limit the number of NAT/firewall sessions each client computer can establish through the WiMAX Modem.
If your network has a small number of clients using peer to peer applications, you can raise this number to ensure that their performance is not degraded by the number of NAT sessions they can establish. If your network has a large number of users using peer to peer applications, you can lower this number to ensure no single client is using all of the available NAT sessions.
Click to save your changes.
changes.
If you do not limit the number of NAT sessions a single
90
User’s Guide
8.3 Port Forwarding
A NAT server set is a list of inside (behind NAT on the LAN) servers, for example, web or FTP, that you can make accessible to the outside world even though NAT makes your whole inside network appear as a single machine to the outside world.
Use the ADVANCED ( 進階 ) > NAT Configuration (NAT 設定 ) > Port Forwarding screen to forward incoming service requests to the server(s) on your local network. You may enter a single port number or a range of port numbers to be forwarded, and the local IP address of the desired server. The port number identifies a service; for example, we b serv ice is on port 80 and FTP on port 21. In some cases, such as for unknown services or where one server can support more than one service (for example both FTP and web service), it might be better to specify a range of port numbers.
In addition to the servers for specified services, NAT supports a default server. A service request that does not have a server explicitly designated for it is forwarded to the default server. If the default is not defined, the service request is simply discarded.
Chapter 8 The NAT Configuration Screens
For example, let's say you want to assig n ports 21-25 to one FTP, Telnet and SMTP server (A in the example), port 80 to another (B in the example) and assign a default server IP address of 192.168.1.35 to a third (C in the example). You assign the LAN IP addresses and the ISP assigns the WAN IP address. The NAT network appears as a single host on the Internet.
Figure 35 Multiple Servers Behind NAT Example
8.3.1 Port Forwarding Options
Click ADVANCED (進階) > NAT Configuration (NAT設定 ) > Port Forwarding to look at the current port-forwarding rules in the WiMAX Modem, and to enable,
User’s Guide
91
Chapter 8 The NAT Configuration Screens
disable, activate, and deactiv at e each one. Y ou can also s et up a defau lt serv er t o handle ports not covered by rules.
Figure 36 ADVANCED ( 進階 ) > NAT Configuration (NAT 設定 ) > Port Forwarding
The following table describes the icons in this screen.
Table 30 ADVANCED ( 進階 ) > NAT Configuration (NAT 設定 ) > Port Forwarding
ICON DESCRIPTION
Edit Click to edit this item.
Delete Click to delete this item.
The following table describes the labels in this screen.
Table 31 ADVANCED ( 進階 ) > NAT Configuration (NAT 設定 ) > Port Forwarding
LABEL DESCRIPTION
Default Server Setup ( 預設伺服器設定 ) Default Server (
預設伺服器 )
Port Forwarding (連接埠轉遞 ) # Active ( 啟動 ) Name ( 名稱 ) Start Port ( 起始
)
Enter the IP address of the server to which the WiMAX Modem should forward packets for ports that are not specified in the Port Forwarding section below or in the TOOLS > Remote MGMT screens. Enter
0.0.0.0 if you want the WiMAX Modem to discard these packets instead.
The number of the item in this list. Select this to enable this rule. Clear this to disable this rule. This field displays the name of the rule. It does not have to be unique. This field displays the beginning of the range of port numbers forwarded
by this rule.
92
User’s Guide
Table 31 ADVANCED ( 進階 ) > NAT Configuration (NAT 設定 ) > Port Forwarding
LABEL DESCRIPTION
End Port (結束埠)This field displays the end of the range of port numbers forwarded by
this rule. If it is the same as the Start Port, only one port number is forwarded.
Server IP Address ( 伺服器 )
Action ( 啟動 ) Click the Edit icon to set up a port forwarding rule or alter the
Apply ( 套用 ) Reset ( 重設 ) Click to restore your previously saved settings.
This field displays the IP address of the server to which packet for the selected port(s) are forwarded.
configuration of an existing port forwarding rule. Click the Delete icon to remove an existing port forwarding rule.
Click to save your changes.
8.3.2 Port Forwarding Rule Setup
Click a port forwarding rule’s Edit icon in the ADVANCED ( 進階 ) > NAT Configuration (NAT 設定 ) > Port Forwarding screen to activate, deactivate, or
edit it.
Chapter 8 The NAT Configuration Screens
Figure 37 ADVANCED (進階) > NAT Configuration (NAT設定) > Port Forwarding >
Rule Setup
The following table describes the labels in this screen.
T able 32 ADVANCED (進階 ) > NAT Configuration (NAT設定 ) > Port Forwarding > Rule Setup
LABEL DESCRIPTION
Active Select this to enable this rule. Clear this to disable this rule. Service Name
Enter a name to identify this rule. You can use 1 - 31 printable ASCII characters, or you can leave this field blank. It does not have to be a unique name.
User’s Guide
93
Chapter 8 The NAT Configuration Screens
T able 32 ADVANCED (進階 ) > NAT Configuration (NAT設定 ) > Port Forwarding > Rule Setup (continued)
LABEL DESCRIPTION
Start Port End Port
Server IP Address
Apply ( 套用 ) Click to save your changes. Cancel ( 取消 ) Click to return to the previous screen without saving your changes.
Enter the port number or range of port numbers you want to forward to the specified server.
To forward one port number, enter the port number in the Start Port and End Port fields.
To forward a range of ports,
• enter the port number at the beginning of the range in the Start Port field
• enter the port number at the end of the range in the End Port field.
Enter the IP address of the server to which to forward packets for the selected port number(s). This server is usually on the LAN.
8.4 Trigger Port
Some services use a dedicated range of ports on the client side and a dedicated range of ports on the server side. With regular port forwarding you set a forwarding port in NAT to forward a service (coming in from the server on the WAN) to the IP address of a computer on the client side (LAN). The problem is that port forwarding only forwards a service to a single LAN IP address. In order to use the same service on a different LAN computer, you have to manually replace the LAN computer's IP address in the forwarding port with another LAN computer's IP address,
Tr i g ger port forwarding solves this problem by allowi ng c om puters on the LAN to dynamically take turns using the service. The WiMAX Modem records the IP address of a LAN computer that sends traffic to the WAN to request a service with a specific port number and protocol (a "trigger" port). When the WiMAX Modem's WAN port receives a response with a specific port number and protocol ("incoming" port), the WiMAX Modem forwards the traffic to the LAN IP address of the computer that sent the request. After that computer’s connection for that service closes, another computer on the LAN can use the service in the same manner. This way you do not need to configure a new IP address each time you want a different LAN computer to use the application.
94
User’s Guide
Chapter 8 The NAT Configuration Screens
Click ADVANCED ( 進階 ) > NAT Configuration (NAT 設定 ) > Trigger Port to maintain trigger port forwarding rules for the WiMAX Modem.
Figure 38 ADVANCED ( 進階 ) > NAT Configuration (NAT 設定 ) > Trigger Port
The following table describes the labels in this screen.
Table 33 ADVANCED ( 進階 ) > NAT Configuration (NAT 設定 ) > Trigger Port
LABEL DESCRIPTION
# The number of the item in this list. Name ( 名稱 ) Enter a name to identify this rule. You can use 1 - 15 printable ASCII
characters, or you can leave this field blank. It does not have to be a unique name.
Incoming ( 內送埠 )
Start Port( 始埠 )
End Port ( 束埠 )
Trigger ( 觸發埠 )
Enter the incoming port number or range of port numbers you want to forward to the IP address the WiMAX Modem records.
To forward one port number, enter the port number in the Start Port ( 起始埠 ) and End Port ( 結束埠 ) fields.
To forward a range of ports,
• enter the port number at the beginning of the range in the Start Port ( 起始埠 ) field
• enter the port number at the end of the range in the End Port (結束 ) field.
If you want to delete this rule, enter zero in the Start Port (起始埠) and End Port ( 結束埠 ) fields.
User’s Guide
95
Chapter 8 The NAT Configuration Screens
Table 33 ADVANCED ( 進階 ) > NAT Configuration (NAT 設定 ) > Trigger Port
LABEL DESCRIPTION
Start Port ( 起始埠 )
End Port ( 束埠 )
Apply ( 套用 ) Cancel ( 重設 ) Click to return to the previous screen without saving your changes.
Enter the outgoing port number or range of port numbers that makes the WiMAX Modem record the source IP address and assign it to the selected incoming port number(s).
T o select one port number, enter the port number in the Start Port and End Port fields.
To select a range of ports,
• enter the port number at the beginning of the range in the Start Port field
• enter the port number at the end of the range in the End Port field.
If you want to delete this rule, enter zero in the Start Port and End Port fields.
Click to save your changes.
8.4.1 Trigger Port Forwarding Example
The following is an example of trigger port forwarding. In this example, J is Jane’ s computer and S is the Real Audio server.
Figure 39 Trigger Port Forwarding Example
1 Jane requests a file from the Real Audio server (port 7070).
2 Port 7070 is a “trigger” port and causes the WiMAX Modem to record Jane’s
computer IP address. The WiMAX Modem associates Jane's computer IP address with the "incoming" port range of 6970-7170.
96
3 The Real Audio server responds using a p ort number ranging between 6970-7170.
4 The WiMAX Modem forwards the traffic to Jane’s computer IP address.
User’s Guide
Chapter 8 The NAT Configuration Screens
5 Only Jane can connect to the Real Audio server until the connection is closed or
times out. The WiMAX Modem times out in three minutes with UDP (User Datagram Protocol), or two hours with TCP/IP (Transfer Control Protocol/Internet Protocol).
Two points to remember about trigger ports:
1 Trigger events only happen on data that is coming from inside the WiMAX Modem
and going to the outside.
2 If an application needs a continuous data stream, that port (range) will be tied up
so that another computer on the LAN can’t trigger it.
User’s Guide
97
Chapter 8 The NAT Configuration Screens
98
User’s Guide
CHAPTER 9
The System Configuration
Screens
9.1 Overview
Click ADVANCED ( 進階 ) > System Configuration ( 系統組態 ) to set up general system settings, change the system mode, change the password, configure the DDNS server settings, and set the current date and time.
9.1.1 What You Can Do in This Chapter
•The Dynamic DNS screen (Section 9.2 on page 100) lets you set up the WiMAX Modem as a dynamic DNS client.
•The Firmware screen (Section 9.3 on page 102) lets you upload new firmware to the WiMAX Modem.
•The Configuration screen (Section 9.4 on page 104) lets you back up or restore the configuration of the WiMAX Modem.
•The Restart screen (Section 9.5 on page 105) lets you restart your WiMAX Modem from within the web configurator.
9.1.2 What You Need to Know
The following terms and concepts may help as you read through this chapter.
System Name
The System Name is often used for identification purposes. Because some ISPs check this name you should enter your computer's "Computer Name".
• In Windows 2000: Click Start > Settings > Control Panel and then double­click the System icon. Select the Network Identification tab and then click the Properties button. Note the entry for the Computer Name field and enter it as the System Name.
• In Windows XP: Click Start > My Computer > View system information and then click the Computer Name tab. Note the entry in the Full computer name field and enter it as the WiMAX Modem System Name.
User’s Guide
99
Chapter 9 The System Configuration Screens
Domain Name
The Domain Name entry is what is propagated to the DHCP clients on the LAN. If you leave this blank, the domain name obtained by DHCP from the ISP is used. While you must enter the host name (System Name) on each individual computer, the domain name can be assigned from the WiMAX Modem via DHCP.
DNS Server Address Assignment
Use DNS (Domain Name System) to map a domain name to its corresponding IP address and vice versa, for instance, the IP address of www.zyxel.com is
204.217.0.2. The DNS server is extremely important because without it, you must
know the IP address of a computer before you can access it.
The WiMAX Modem can get the DNS server addresses in the following ways:
1 The ISP tells you the DNS server addresses, usually in the form of an information
sheet, when you sign up. If your ISP g i ves you DNS server addresses, enter them in the DNS Server fields in the SYSTEM General screen.
2 If the ISP did not give you DNS server information, leave the DNS Server fields in
the SYSTEM General screen set to 0.0.0.0 for the ISP to dynamically assign the DNS server IP addresses.
9.2 Dynamic DNS
Dynamic DNS allows you to update your current dynamic IP address with one or many dynamic DNS services so that anyone can contact you (in NetMeeting, CU­SeeMe, etc.). You can also access your FTP server or Web site on your own computer using a domain name (for instance myhost.dhs.org, where myhost is a name of your choice) that will never change instead of using an IP address that changes each time you reconnect. Your friends or relatives will always be able to call you even if they don't know your IP address.
First of all, you need to have registered a dynamic DNS account with www.dyndns.org. This is for people with a dynamic IP from their ISP or DHCP server that would still like to have a domain name. The Dynamic DNS service provider will give you a password or key.
100
Enabling the wildcard feature for your host causes *.yourhost.dyndns.org to be aliased to the same IP address as yourhost.dyndns.org. This feature is useful if you want to be able to use, for example, www.yourhost.dyndns. org and still reach your hostname.
User’s Guide
Chapter 9 The System Configuration Screens
Note: If you have a private WAN IP address, then you cannot use Dynamic DNS.
Click ADVANCED (進階) > System Configuration ( 系統組態 ) > Dynamic DNS to set up the WiMAX Modem as a dynamic DNS client.
Figure 40 ADVANCED ( 進階 ) > System Configuration ( 系統組態 ) > Dynamic DNS
The following table describes the labels in this screen.
Table 34 ADVANCED ( 進階 ) > System Configuration ( 系統組態 ) > Dynamic DNS
LABEL DESCRIPTION
Dynamic DNS Setup ( 動態 DNS 設定 ) Enable Dynamic
DNS ( 啟用動態 DNS)
Service Provider ( 服務供 應商 )
Dynamic DNS Type ( 動態DNS 類型 )
Host Name ( 機名稱 )
User Name ( 使 用者名稱 )
Password (密碼) Enter the password assigned to you. Enable Wildcard
Option (啟用萬用 字元選項 )
Enable offline option ( 啟用離線
選項 )( 只限於自 訂 DNS)
Select this to use dynamic DNS.
Select the name of your Dynamic DNS service provider.
Select the type of service that you are registered for from your Dynamic DNS service provider.
Enter the host name. You can specify up to two host names, separated by a comma (",").
Enter your user name.
Select this to enable the DynDNS Wildcard feature.
This field is available when CustomDNS ( 自訂 DNS) is selected in the DDNS Type ( 動態 DNS 類型 ) field. Select this if your Dynamic DNS service provider redirects traffic to a URL that you can specify while you are off line. Check with your Dynamic DNS service provider.
User’s Guide
101
Loading...