Page 1
MAX208M2W Series
WiMAX Indoor VoIP Wi-Fi IAD
Default Login Details
IP Address: http://192.168.1.1
Admin s
User Name
and
Password:
Guest s User
Name and
Password:
Software Version 2.00
Edition 1, 1/2011
www.zyxel.com
admin / 1234
guest / guest
www.zyxel.com
Copyright © 2011
ZyXEL Communications Corporation
Page 2
Page 3
About This User's Guide
About This User's Guide
Intended Audience
This manual is intended for people who want to configure the ZyXEL MAX208M2W
Series using the ZyXEL Web Configurator. You should have at least a basic
knowledge of TCP/IP networking concepts and topology.
Related Documentation
! Quick Start Guide
The Quick Start Guide is designed to help you get up and running right away. It
contains information on setting up your network and configuring for Internet
access.
! Support Disc
Refer to the included CD for support documents.
! ZyXEL Web Site
Please refer to www.zyxel.com for additional support documentation and
product certifications.
Documentation Feedback
Send your comments, questions or suggestions to: techwriters@zyxel.com.tw
Thank you!
The Technical Writing Team, ZyXEL Communications Corp.
Need More Help?
More help is available at www.zyxel.com.
MAX208M2W Series User s Guide
3
Page 4
About This User's Guide
! Download Library
Search for the latest product updates and documentation from this link. Read
the Tech Doc Overview to find out how to efficiently use the documentation in
order to better understand how to use your product.
! Knowledge Base
If you have a specific question about your product, the answer may be here.
This is a collection of answers to previously asked questions about ZyXEL
products.
! Forum
This contains discussions on ZyXEL products. Learn from others who use ZyXEL
products and share your experiences as well.
Customer Support
Should problems arise that cannot be solved by the methods listed above, you
should contact your vendor. If you cannot contact your vendor, then contact a
ZyXEL office for the region in which you bought the device.
See http://www.zyxel.com/web/contact_us.php for contact information. Please
have the following information ready when you contact an office.
! Product model and serial number.
! Warranty Information.
! Date that you received your device.
! Brief description of the problem and the steps you took to solve it.
4
MAX208M2W Series User s Guide
Page 5
Document Conventions
Document Conventions
Warnings and Notes
These are how warnings and notes are shown in this User s Guide.
Warnings tell you about things that could harm you or your
MAX208M2W Series.
Note: Notes tell you other important information (for example, other things you may
need to configure or helpful tips) or recommendations.
Syntax Conventions
! The product(s) described in this book may be referred to as the "MAX208M2W
Series#, the "device#, the "system# or the "product# in this User s Guide.
! Product labels, screen names, field labels and field choices are all in bold font.
! A key stroke is denoted by square brackets and uppercase text, for example,
[ENTER] means the "enter# or "return# key on your keyboard.
!"Enter# means for you to type one or more characters and then press the
[ENTER] key. "Select# or "choose# means for you to use one of the predefined
choices.
! A right angle bracket ( > ) within a screen name denotes a mouse click. For
example, TOOLS > Logs > Log Settings means you first click Tools in the
navigation panel, then the Logs sub menu and finally the Log Settings tab to
get to that screen.
! Units of measurement may denote the "metric# value or the "scientific# value.
For example, "k# for kilo may denote "1000# or "1024#, "M# for mega may
denote "1000000# or "1048576# and so on.
!"e.g.,# is a shorthand for "for instance#, and "i.e.,# means "that is# or "in other
words#.
MAX208M2W Series User s Guide
5
Page 6
Document Conventions
Icons Used in Figures
Figures in this User s Guide may use the following generic icons. The MAX208M2W
Series icon is not an exact representation of your product.
Table 1 Common Icons
MAX208M2W Series ComputerWireless Signal
NotebookServerBase Station
TelephoneSwitchRouter
Internet CloudNetwork Cloud
6
MAX208M2W Series User s Guide
Page 7
Safety Warnings
Safety Warnings
For your safety, be sure to read and follow all warning notices and
instructions.
! Do NOT use this product near water, for example, in a wet basement or near a
swimming pool.
! Do NOT expose your device to dampness, dust or corrosive liquids.
! Do NOT store things on the device.
! Do NOT install, use, or service this device during a thunderstorm. There is a
remote risk of electric shock from lightning.
! Connect ONLY suitable accessories to the device.
! Do NOT open the device or unit. Opening or removing covers can expose you to
dangerous high voltage points or other risks. ONLY qualified service personnel
should service or disassemble this device. Please contact your vendor for further
information.
! Make sure to connect the cables to the correct ports.
! Place connecting cables carefully so that no one will step on them or stumble
over them.
! Always disconnect all cables from this device before servicing or disassembling.
! Use ONLY an appropriate power adaptor or cord for your device. Connect it to
the right supply voltage (for example, 110V AC in North America or 230V AC in
Europe).
! Do NOT remove the plug and connect it to a power outlet by itself; always
attach the plug to the power adaptor first before connecting it to a power outlet.
! Do NOT allow anything to rest on the power adaptor or cord and do NOT place
the product where anyone can walk on the power adaptor or cord.
! Do NOT use the device if the power adaptor or cord is damaged as it might
cause electrocution.
! If the power adaptor or cord is damaged, remove it from the device and the
power source.
! Do NOT attempt to repair the power adaptor or cord. Contact your local vendor
to order a new one.Do not use the device outside, and make sure all the
connections are indoors. There is a remote risk of electric shock from lightning.
! Do NOT obstruct the device ventilation slots, as insufficient airflow may harm
your device.Use only No. 26 AWG (American Wire Gauge) or larger
telecommunication line cord.
! Antenna Warning! This device meets ETSI and FCC certification requirements
when using the included antenna(s). Only use the included antenna(s).
! If you wall mount your device, make sure that no electrical lines, gas or water
pipes will be damaged.
MAX208M2W Series User s Guide
7
Page 8
Safety Warnings
! Make sure that the cable system is grounded so as to provide some protection
against voltage surges.
Your product is marked with this symbol, which is known as the WEEE mark.
WEEE stands for Waste Electronics and Electrical Equipment. It means that
used electrical and electronic products should not be mixed with general
waste. Used electrical and electronic equipment should be treated
separately.
8
MAX208M2W Series User s Guide
Page 9
Contents Overview
Contents Overview
User!s Guide ...........................................................................................................................17
Getting Started ...........................................................................................................................19
Introducing the Web Configurator ..............................................................................................25
Setup Wizard............................................................................................................................. 31
Tutorials .....................................................................................................................................43
Technical Reference ..............................................................................................................63
System Status ............................................................................................................................65
WiMAX .......................................................................................................................................69
Network Setting .........................................................................................................................89
Security ....................................................................................................................................127
The VoIP General Screens ......................................................................................................133
The VoIP Account Screens ......................................................................................................139
The VoIP Line Screens ............................................................................................................157
Maintenance ............................................................................................................................161
Troubleshooting .......................................................................................................................187
Product Specifications .............................................................................................................193
MAX208M2W Series User s Guide
9
Page 10
Contents Overview
10
MAX208M2W Series User s Guide
Page 11
Table of Contents
Table of Contents
About This User's Guide..........................................................................................................3
Document Conventions............................................................................................................5
Safety Warnings........................................................................................................................7
Contents Overview...................................................................................................................9
Table of Contents....................................................................................................................11
Part I: User!s Guide................................................................................17
Chapter 1
Getting Started........................................................................................................................19
1.1 About Your MAX208M2W Series .........................................................................................19
1.1.1 WiMAX Internet Access .............................................................................................19
1.1.2 Make Calls via Internet Telephony Service Provider ..................................................20
1.2 MAX208M2W Series Hardware ...........................................................................................21
1.2.1 LEDs ..........................................................................................................................21
1.3 Good Habits for Managing the MAX208M2W Series ..........................................................22
Chapter 2
Introducing the Web Configurator........................................................................................25
2.1 Overview ..............................................................................................................................25
2.1.1 Accessing the Web Configurator ................................................................................25
2.1.2 The Reset Button .......................................................................................................26
2.1.3 Saving and Canceling Changes .................................................................................27
2.1.4 Working with Tables ...................................................................................................27
2.2 The Main Screen .................................................................................................................28
Chapter 3
Setup Wizard...........................................................................................................................31
3.1 Overview ..............................................................................................................................31
3.1.1 Welcome to the Setup Wizard ....................................................................................31
3.1.2 LAN Settings ..............................................................................................................33
3.1.3 WiMAX Frequency Settings .......................................................................................34
3.1.4 WiMAX Authentication Settings .................................................................................36
3.1.5 VoIP Settings ..............................................................................................................38
MAX208M2W Series User s Guide
11
Page 12
Table of Contents
3.1.6 WLAN Settings ...........................................................................................................39
3.1.7 Setup Complete .........................................................................................................41
Chapter 4
Tutorials...................................................................................................................................43
4.1 Overview ..............................................................................................................................43
4.2 WiMAX Connection Settings ...............................................................................................43
4.3 Configuring LAN DHCP .......................................................................................................44
4.4 Changing Certificate ............................................................................................................46
4.5 Blocking Web Access ..........................................................................................................47
4.6 Configuring the MAC Address Filter ....................................................................................48
4.7 Setting Up NAT Port Forwarding .........................................................................................50
4.8 Access the MAX208M2W Series Using DDNS ...................................................................53
4.8.1 Registering a DDNS Account on www.dyndns.org ....................................................53
4.8.2 Configuring DDNS on Your MAX208M2W Series ......................................................54
4.8.3 Testing the DDNS Setting ..........................................................................................54
4.9 Configuring Static Route for Routing to Another Network ...................................................54
4.10 Remotely Managing Your MAX208M2W Series ................................................................57
4.11 VLAN Configuration Example ............................................................................................58
Part II: Technical Reference..................................................................63
Chapter 5
System Status.........................................................................................................................65
5.1 Overview ..............................................................................................................................65
5.2 System Status ......................................................................................................................65
Chapter 6
WiMAX......................................................................................................................................69
6.1 Overview ..............................................................................................................................69
6.1.1 What You Need to Know ............................................................................................69
6.2 Connection Settings ............................................................................................................73
6.3 Frequency Settings ..............................................................................................................75
6.4 Authentication Settings ........................................................................................................78
6.5 Connect ...............................................................................................................................81
6.6 Wide Scan ...........................................................................................................................84
6.7 Link Status ...........................................................................................................................85
6.8 Link Statistics .......................................................................................................................87
6.9 Connection Info ...................................................................................................................88
6.10 Service Flow ......................................................................................................................88
12
MAX208M2W Series User s Guide
Page 13
Table of Contents
Chapter 7
Network Setting.......................................................................................................................89
7.1 Overview ..............................................................................................................................89
7.1.1 What You Need to Know ............................................................................................89
7.2 WAN ....................................................................................................................................94
7.3 PPPoE .................................................................................................................................96
7.4 GRE .....................................................................................................................................98
7.5 EtherIP .................................................................................................................................98
7.6 IP .........................................................................................................................................99
7.7 DHCP ................................................................................................................................100
7.8 WLAN ................................................................................................................................102
7.9 WPS ..................................................................................................................................104
7.10 MAC Address Filter .........................................................................................................104
7.11 Static Route ......................................................................................................................106
7.12 Static Route Add ..............................................................................................................106
7.13 RIP ...................................................................................................................................107
7.14 Port Forwarding ...............................................................................................................108
7.14.1 Port Forwarding Wizard ..........................................................................................110
7.15 Port Trigger .......................................................................................................................111
7.15.1 Port Trigger Wizard .................................................................................................112
7.15.2 Trigger Port Forwarding Example ...........................................................................113
7.16 DMZ ..................................................................................................................................114
7.17 ALG ..................................................................................................................................115
7.18 UPnP ................................................................................................................................116
7.18.1 Installing UPnP in Windows XP ..............................................................................116
7.18.2 Web Configurator Easy Access .............................................................................120
7.19 VLAN ...............................................................................................................................122
7.20 DDNS ..............................................................................................................................125
7.21 Content Filter ...................................................................................................................126
Chapter 8
Security..................................................................................................................................127
8.1 Overview ............................................................................................................................127
8.1.1 What You Need to Know ..........................................................................................127
8.2 IP Filter ..............................................................................................................................128
8.3 MAC Filter ..........................................................................................................................129
8.4 DDOS ................................................................................................................................130
Chapter 9
The VoIP General Screens...................................................................................................133
9.1 VoIP Overview ...................................................................................................................133
9.1.1 What You Can Do in This Chapter ...........................................................................133
9.1.2 What You Need to Know ..........................................................................................133
MAX208M2W Series User s Guide
13
Page 14
Table of Contents
9.1.3 Before you Begin ......................................................................................................135
9.2 Media .................................................................................................................................135
9.2.1 QoS ..........................................................................................................................136
9.2.2 QoS Settings ............................................................................................................137
9.3 Technical Reference ..........................................................................................................137
9.3.1 DSCP and Per-Hop Behavior ...................................................................................137
Chapter 10
The VoIP Account Screens..................................................................................................139
10.1 Overview ..........................................................................................................................139
10.1.1 What You Can Do in This Chapter .........................................................................139
10.1.2 What You Need to Know ........................................................................................139
10.1.3 SIP User Agent ......................................................................................................140
10.2 Status ...............................................................................................................................144
10.3 Server ..............................................................................................................................146
10.4 Feature ............................................................................................................................147
10.5 User .................................................................................................................................150
10.6 Dialing ..............................................................................................................................152
10.7 Speed Dial .......................................................................................................................152
10.8 FAX ..................................................................................................................................153
10.9 Technical Reference ........................................................................................................154
10.9.1 SIP Call Progression ..............................................................................................154
10.9.2 SIP Client Server ....................................................................................................155
Chapter 11
The VoIP Line Screens.........................................................................................................157
11.1 Overview ..........................................................................................................................157
11.1.1 What You Can Do in This Chapter .........................................................................157
11.1.2 What You Need to Know ........................................................................................157
11.2 Phone ..............................................................................................................................158
11.3 Voice ................................................................................................................................159
11.4 Profile ...............................................................................................................................159
Chapter 12
Maintenance..........................................................................................................................161
12.1 Overview ..........................................................................................................................161
12.1.1 What You Need to Know ........................................................................................161
12.2 Password .........................................................................................................................168
12.3 HTTP ...............................................................................................................................169
12.4 Telnet ...............................................................................................................................170
12.5 SSH .................................................................................................................................170
12.6 SNMP ..............................................................................................................................171
12.7 CWMP .............................................................................................................................172
14
MAX208M2W Series User s Guide
Page 15
Table of Contents
12.8 OMA-DM ..........................................................................................................................174
12.9 Date .................................................................................................................................176
12.10 Time Zone ......................................................................................................................177
12.11 Upgrade File ..................................................................................................................177
12.11.1 The Firmware Upload Process .............................................................................178
12.12 Upgrade Link .................................................................................................................179
12.13 CWMP Upgrade ............................................................................................................179
12.14 Backup ...........................................................................................................................180
12.15 Restore ..........................................................................................................................181
12.15.1 The Restore Configuration Process .....................................................................181
12.16 Factory Defaults ............................................................................................................182
12.17 Log Setting ....................................................................................................................182
12.18 Log Display ....................................................................................................................183
12.19 Ping Test ........................................................................................................................184
12.20 Traceroute Test ..............................................................................................................184
12.21 About .............................................................................................................................185
12.22 Reboot ...........................................................................................................................185
Chapter 13
Troubleshooting....................................................................................................................187
13.1 Power, Hardware Connections, and LEDs ......................................................................187
13.2 MAX208M2W Series Access and Login ..........................................................................188
13.3 Internet Access ................................................................................................................190
13.4 Reset the MAX208M2W Series to Its Factory Defaults ...................................................191
13.4.1 Pop-up Windows, JavaScript and Java Permissions .............................................192
Chapter 14
Product Specifications.........................................................................................................193
14.1 Wall-Mounting ..................................................................................................................201
14.1.1 The Wall-Mounting Kit ............................................................................................201
14.1.2 Instructions .............................................................................................................201
Appendix A WiMAX Security................................................................................................205
Appendix B Setting Up Your Computer s IP Address...........................................................209
Appendix C Pop-up Windows, JavaScript and Java Permissions........................................237
Appendix D IP Addresses and Subnetting...........................................................................247
Appendix E Importing Certificates........................................................................................259
Appendix F Common Services.............................................................................................291
Appendix G Legal Information..............................................................................................295
MAX208M2W Series User s Guide
15
Page 16
Table of Contents
Index.......................................................................................................................................299
16
MAX208M2W Series User s Guide
Page 17
PART I
User!s Guide
17
Page 18
18
Page 19
CHAPTER 1
Getting Started
1.1 About Your MAX208M2W Series
The MAX208M2W Series includes MAX208M2W and MAX218M2W.
The MAX208M2W Series has a built-in switch and two phone ports. It allows you
to access the Internet by connecting to a WiMAX wireless network. You can use a
traditional analog telephone to make Internet calls using the MAX208M2W Series s
Voice over IP (VoIP) communication capabilities.
Additionally, The web browser-based Graphical User Interface (GUI), also known
as the web configurator, provides easy management of the device and its features.
See Chapter 14 on page 193 for a complete list of features for your model.
1.1.1 WiMAX Internet Access
Connect your computer or network to the MAX208M2W Series for WiMAX Internet
access. See the Quick Start Guide for instructions on hardware connection.
In a wireless metropolitan area network (MAN), the MAX208M2W Series connects
to a WiMAX base station (BS) for Internet access.
The following diagram shows a notebook computer equipped with the
MAX208M2W Series connecting to the Internet through a WiMAX base station
(marked BS).
Figure 1 Mobile Station and Base Station
When the firewall is on, all incoming traffic from the Internet to your network is
blocked unless it is initiated from your network.
MAX208M2W Series User s Guide
19
Page 20
Chapter 1Getting Started
Use content filtering to block access to web sites with URLs containing keywords
that you specify. You can define time periods and days during which content
filtering is enabled and include or exclude particular computers on your network
from content filtering. For example, you could block access to certain web sites for
the kids.
1.1.2 Make Calls via Internet Telephony Service Provider
In a home or small office environment, you can use the MAX208M2W Series to
make and receive the following types of VoIP telephone calls:
! Peer-to-Peer calls - Use the MAX208M2W Series to make a call directly to the
recipient s IP address without using a SIP proxy server.
Figure 2 VoIP Features - Peer-to-Peer Calls
! Calls via a VoIP service provider - The MAX208M2W Series sends your call to a
VoIP service provider s SIP server which forwards your calls to either VoIP or
PSTN phones.
Figure 3 Calls via VoIP Service Provider
20
MAX208M2W Series User s Guide
Page 21
1.2 MAX208M2W Series Hardware
Follow the instructions in the Quick Start Guide to make hardware connections.
1.2.1 LEDs
The following figure shows the LEDs (lights) on the MAX208M2W Series.
Figure 4 The MAX208M2W Series s LEDs
POWER
LED
WIMAX
LINK
SIGNAL
STRENGTH
INDICATORS
Chapter 1Getting Started
VOICE
LEDS
1 & 2
WLAN
LED
The following table describes your MAX208M2W Series s LEDs (from top to
bottom).
Table 2 The MAX208M2W Series LEDs behavior
LED STATE DESCRIPTION
PowerOffThe MAX208M2W Series is not receiving power.
RedThe MAX208M2W Series is receiving power but has
been unable to start up correctly or is not receiving
enough power. See the Troubleshooting section for
more information.
Green Solid: The MAX208M2W Series is receiving power and
functioning correctly.
Flashing: the device is self-testing (startup)
MAX208M2W Series User s Guide
21
Page 22
Chapter 1Getting Started
Table 2 The MAX208M2W Series LEDs behavior
LED STATE DESCRIPTION
WiMAX LinkOffThe MAX208M2W Series is not connected to a wireless
Signal
Strength
Indicator
Voice 1 & 2OffNo SIP account is registered, or the MAX208M2W
WLANOffThe Wi-Fi network is not operational.
(WiMAX) network.
GreenThe MAX208M2W Series is successfully connected to a
wireless (WiMAX) network.
Green (Blinking
Slowly)
Green (Blinking
Quickly)
The Strength Indicator LEDs display the Interference-plus-Noise Ratio
(CINR) of the wireless (WiMAX) connection.
Signal 1 OnThe signal strength is in the range between 5 and 15.
Signal 2 OnThe signal strength is in the range between 16 and 24.
Signal 3 OnThe signal strength is greater than or equal to 25 dBm
GreenA SIP account is registered.
Green (Blinking)A SIP account is registered, and the phone attached to
YellowA SIP account is registered and has a voice message
Yellow (Blinking)A SIP account is registered and has a voice message
GreenThe Wi-Fi network is operational.
Blinking GreenThe WiMAX Device is sending and receiving data
The MAX208M2W Series is searching for a wireless
(WiMAX) network.
The MAX208M2W Series has found a wireless (WiMAX)
network and is connecting.
Series is not receiving power.
the VoIP port is in use (off the hook).
on the SIP server.
on the SIP server, and the phone attached to the VoIP
port is in use (off the hook).
across the Wi-Fi network.
1.3 Good Habits for Managing the MAX208M2W
Series
Do the following things regularly to make the MAX208M2W Series more secure
and to manage the MAX208M2W Series more effectively.
! Change the password. Use a password that s not easy to guess and that consists
of different types of characters, such as numbers and letters.
! Write down the password and put it in a safe place.
22
MAX208M2W Series User s Guide
Page 23
Chapter 1Getting Started
! Back up the configuration (and make sure you know how to restore it).
Restoring an earlier working configuration may be useful if the MAX208M2W
Series becomes unstable or even crashes. If you forget your password, you will
have to reset the MAX208M2W Series to its factory default settings. If you
backed up an earlier configuration file, you would not have to totally reconfigure the MAX208M2W Series. You could simply restore your last
configuration.
MAX208M2W Series User s Guide
23
Page 24
Chapter 1Getting Started
24
MAX208M2W Series User s Guide
Page 25
CHAPTER 2
Introducing the Web
Configurator
2.1 Overview
The Web Configurator is an HTML-based management interface that allows easy
device set up and management via any web browser that supports: HTML 4.0,
CSS 2.0, and JavaScript 1.5, and higher. The recommended screen resolution for
using the web configurator is 1024 by 768 pixels and 16-bit color, or higher.
In order to use the Web Configurator you need to allow:
! Web browser pop-up windows from your device. Web pop-up blocking is enabled
by default in many operating systems and web browsers.
! JavaScript (enabled by default in most web browsers).
! Java permissions (enabled by default in most web browsers).
See the Appendix C on page 237 for more information on configuring your web
browser.
2.1.1 Accessing the Web Configurator
1 Make sure your MAX208M2W Series hardware is properly connected (refer to the
Quick Start Guide for more information).
2 Launch your web browser.
3 Enter 192.168.1.1" as the URL.
MAX208M2W Series User s Guide
25
Page 26
Chapter 2Introducing the Web Configurator
4 A login screen displays. Enter the default Username (admin) and Password
(1234), then click Login.
Figure 5 Login screen
Note: For security reasons, the MAX208M2W Series automatically logs you out if you
do not use the Web Configurator for five minutes. If this happens, log in again.
2.1.2 The Reset Button
If you forget your password or cannot access the Web Configurator, you will need
to use the Reset button to reload the factory-default configuration file. This
means that you will lose all configurations that you had previously and the
password will be reset to "1234#.
2.1.2.1 Using The Reset Button
1 Make sure the Power light is on (not blinking).
2 To set the device back to the factory default settings, press the Reset button for
five seconds or until all LED lights blink one time, then release it. The device
restarts when the defaults have been restored.
3 Reconfigure the MAX208M2W Series following the steps in your Quick Start Guide.
26
MAX208M2W Series User s Guide
Page 27
Chapter 2Introducing the Web Configurator
2.1.3 Saving and Canceling Changes
All screens to which you can make configuration changes must be saved before
those changes can go into effect. If you make a mistake while configuring the
MAX208M2W Series, you can cancel those changes and start over.
Figure 6 Saving and Canceling Changes
This screen contains the following fields:
Table 3 Saving and Canceling Changes
LABEL DESCRIPTION
SaveClick this to save your changes.
CancelClick this to restore the settings on this page to their last saved values.
Note: If you make changes to a page but do not save before switching to another
page or exiting the Web Configurator, those changes are disgarded.
2.1.4 Working with Tables
Many screens in the MAX208M2W Series contain tables to provide information or
additional configuration options.
Figure 7 Tables Example
This screen contains the following fields:
Table 4 Saving and Canceling Changes
LABEL DESCRIPTION
Items per Page
This displays the number of items displayed per table page.
Use the menu to change this value.
First Page
MAX208M2W Series User s Guide
Click this to go to the first page in the table.
27
Page 28
Chapter 2Introducing the Web Configurator
Table 4 Saving and Canceling Changes (continued)
LABEL DESCRIPTION
Previous Page
Click this to go to the previous page in the table.
Page Indicator / Jump to Page
This indicates which page is currently displayed in the
table. Use the menu to jump to another page. You can only
jump to other pages if those pages exist.
Next Page
Click this to go to the previous page in the table.
Last Page
Click this to go to the last page in the table.
#This indicates an item s position in the table. It has no
bearing on that item s importance or lack there of.
Total NumThis indicates the total number of items in the table,
including items on pages that are not visible.
2.2 The Main Screen
When you first log into the Web Configurator, the Main screen appears. Here you
can view a summary of your MAX208M2W Series s connection status. This is also
the default "home# page for the Web Configurator and it contains convenientlyplaced shortcuts to all of the other screens.
Note: Some features in the Web Configurator may not be available depending on your
firmware version and/or configuration.
Note: The available menus and screens vary depending on the user account you use
for login.
28
MAX208M2W Series User s Guide
Page 29
Figure 8 Main Screen
Chapter 2Introducing the Web Configurator
The following table describes the icons in this screen.
Table 5 Main > Icons
ICON DESCRIPTION
System Status
Click this to open the Main screen, which shows your
MAX208M2W Series status and other information.
WiMAX
Click this to open the WiMAX menu, which gives you options for
configuring your WiMAX settings.
Network Setting
Click this to open the Network menu, which gives you options for
configuring your network settings.
Security
Click this to open the Security menu, which gives you options for
configuring your firewall and security settings.
VoIP
Click this icon to open the VoIP menu, which gives you options
on how to use the device to make phone calls.
MAX208M2W Series User s Guide
29
Page 30
Chapter 2Introducing the Web Configurator
Table 5 Main > Icons (continued)
ICON DESCRIPTION
Maintenance
Click this to open the Maintenance menu, which gives you
options for maintaining your MAX208M2W Series and performing
basic network connectivity tests.
Language
Use this menu to select the Web Configurator s language.
Setup Wizard
Click this to open the Setup Wizard, where you can configure the
most essential settings for your MAX208M2W Series to work.
Logout
Click this to log out of the Web Configurator.
30
MAX208M2W Series User s Guide
Page 31
CHAPTER 3
Setup Wizard
3.1 Overview
This chapter provides information on the ZyXEL Setup Wizard. The wizard guides
you through several steps for onfiguring your network settings.
3.1.1 Welcome to the Setup Wizard
This screen provides a quick summary of the configuration tasks the wizard helps
you to perform. They are:
1 Set up your Local Area Network (LAN) options, which determine how the devices
in your home or office connect to the MAX208M2W Series.
2 Set up your MAX208M2W Series s broadcast frequency, which is the radio channel
it uses to communicate with the ISP s base station.
3 Set up your MAX208M2W Series s login options, which are used to connect your
LAN to the ISP s network and verify your account.
4 Set up your MAX208M2W Series s VoIP Settings, which will allow you to make calls
over the nternet.
MAX208M2W Series User s Guide
31
Page 32
Chapter 3Setup Wizard
5 Set up your MAX208M2W Series s WLAN so that other devices, such as a laptop or
a smartphone, can connect wirelessly to the nternet using the MAX208M2W
Series.
Figure 9 Setup Wizard > Welcome
32
MAX208M2W Series User s Guide
Page 33
3.1.2 LAN Settings
The LAN Settings screen allows you to configure your local network options.
Figure 10 Setup Wizard > LAN Settings
Chapter 3Setup Wizard
The following table describes the labels in this screen.
Table 6 Setup Wizard > LAN Settings
LABEL DESCRIPTION
LAN TCP/IP
IP
Address
Enter the IP address of the MAX208M2W Series on the LAN.
Note: This field is the IP address you use to access the MAX208M2W
Series on the LAN. If the web configurator is running on a
computer on the LAN, you lose access to it as soon as you
change this field. You can access the web configurator again by
typing the new IP address in the browser.
IP Subnet
Mask
DHCP Server
Enable Select this if you want the MAX208M2W Series to be the DHCP server on
Start IP Enter the IP address from which the MAX208M2W Series begins allocating
End IP Enter the IP address at which the MAX208M2W Series stops allocating IP
Enter the subnet mask of the LAN.
the LAN. As a DHCP server, the MAX208M2W Series assigns IP addresses
to DHCP clients on the LAN and provides the subnet mask and DNS server
information.
IP addresses.
addresses.
MAX208M2W Series User s Guide
33
Page 34
Chapter 3Setup Wizard
Table 6 Setup Wizard > LAN Settings (continued)
LABEL DESCRIPTION
Lease
Time
DNS Server assigned by DHCP Server
First DNS
Server
Second
DNS
Server
Third
DNS
Server
Back Click to display the previous screen.
Next Click to proceed to the next screen.
Enter the duration in minutes before the device requests a new IP address
from the DHCP server.
Specify the first IP address of three DNS servers that the network can use.
The MAX208M2W Series provides these IP addresses to DHCP clients.
Specify the second IP address of three DNS servers that the network can
use. The MAX208M2W Series provides these IP addresses to DHCP clients.
Specify the third IP address of three DNS servers that the network can use.
The MAX208M2W Series provides these IP addresses to DHCP clients.
3.1.3 WiMAX Frequency Settings
The WiMAX Frequency Settings screen allows you to configure the broadcast radio
frequency used by the MAX208M2W Series.
Note: These settings should be provided by your ISP.
Figure 11 Setup Wizard > WiMAX Frequency Settings
34
MAX208M2W Series User s Guide
Page 35
Chapter 3Setup Wizard
The following table describes the labels in this screen.
Table 7 Setup Wizard > WiMAX Frequency Settings
LABEL DESCRIPTION
Setting TypeSelect the WiMAX frequency setting type from the list.
! By Range - Select this to set up the frequency based on a range
of MHz.
! By List - Select this to set up the frequency on an individual
MHz basis. You can add multiple MHz values to the list.
StepEnter the increments in MHz by which to increase the frequency
range.
Note: This field only appears when you select By Range under
Setting Type.
Start FrequencyEnter the frequency value at the beginning of the frequency range
to use. The frequency is increased in increments equal to the Step
value until the End Frequency is reached, at which time the cycle
starts over with the Start Frequency.
Note: This field only appears when you select By Range under
Setting Type.
End FrequencyEnter the frequency value at the end of the frequency range to use.
Note: This field only appears when you select By Range under
Setting Type.
BandwidthSet the frequency bandwidth in MHz that this MAX208M2W Series
uses.
#This is an index number for enumeration purposes only.
Frequency (MHz)Displays the frequency MHz for the item in the list.
Total NumDisplays the total number of items in the list.
DeleteClick this to remove an item from the list.
AddClick this to add an item to the list.
OKClick this to save an newly added item to the list.
#This is an index number for enumeration purposes only.
Band Start (KHz)Indicates the beginning of the frequency band in KHz.
Band End (KHz)Indicates the end of the frequency band in KHz.
Total NumDisplays the total number of items in the list.
Back Click to display the previous screen.
Next Click to proceed to the next screen.
MAX208M2W Series User s Guide
35
Page 36
Chapter 3Setup Wizard
3.1.4 WiMAX Authentication Settings
The WiMAX Authentication Settings screen allows you to configure how your
MAX208M2W Series logs into the service provider s network.
Note: These settings should be provided by your ISP.
Note: The EAP supplicant settings on this screen vary depending on the
authentication mode your select.
Figure 12 Setup Wizard > WiMAX Authentication Settings
36
MAX208M2W Series User s Guide
Page 37
Chapter 3Setup Wizard
The following table describes the labels in this screen.
Table 8 Setup Wizard > WiMAX Authentication Settings
LABEL DESCRIPTION
Authentication
Authenticati
on Mode
EAP Supplication
EAP Mode Select an EAP autentication mode. See Table 15 on page 79 if you need
Anonymous IdEnter your anonymous ID.
Select a WiMAX authentication mode for authentication network
sessions with the ISP. Options are:
! No authentication
! User authentication
! Device authentication
! User and Device authentication
more inforamtion.
Note: Some modes may not require this.
Ignore Cert
Verification
Server Root
CA Cert.
File
Server Root
CA Cert.
Info
Device
Cert. File
Device
Cert. Info.
Device
Private Key
Device
Private Key
Info
Device
Private Key
Password
Inner Mode Select an inner authentication mode (MS-CHAP, MS-CHAPV2, CHAP,
Username Enter your authentication username.
Password Enter your authentication password.
Back Click to display the previous screen.
Next Click to proceed to the next screen.
Select this to ignore base station certification verification when a
certificate is received during EAP-TLS or EAP-TTLS.
Browse for and choose a server root certificate file, if required.
This field displays information about the assigned server root certificate.
Browse for and choose a device certificate file, if required.
This field displays information about the assigned device certificate.
Browse for and choose a device private key, if required.
This field displays information about the assigned device private key.
Enter the device private key, if required.
MD5, PAP. See Table 15 on page 79 if you need more inforamtion.
MAX208M2W Series User s Guide
37
Page 38
Chapter 3Setup Wizard
3.1.5 VoIP Settings
The VoIP Settings screen allows you to configure how your MAX208M2W Series
connects to up to two VoIP service providers network and makes calls over the
Internet.
Note: This settings should be provided by your VoIP service provider.
Figure 13 Setup Wizard > VoIP Settings
38
The following table describes the labels in this screen.
Table 9 Setup Wizard > VoIP Settings
LABEL DESCRIPTION
Line 1 SIP Account - Configure this section to use the PHONE 1 port.
Enable Select this to activate the SIP account.
SIP ServerEnter the IP address or domain name of the SIP server.
Port NumberEnter the SIP server s listening port number.
MAX208M2W Series User s Guide
Page 39
Table 9 Setup Wizard > VoIP Settings (continued)
LABEL DESCRIPTION
Subscriber
Number
Display NameEnter the name that appears on the other party s device if they have
Authentication
Name
PasswordType the SIP password associated with this account.
Line 2 SIP Account - Configure this section to use the PHONE 2 port. See the fields above
for similar description.
Back Click to display the previous screen.
Next Click to proceed to the next screen.
Enter your SIP number. In the full SIP URI, this is the part before the @
symbol.
Caller ID enabled.
Type the SIP user name associated with this account for authentication
to the SIP server.
3.1.6 WLAN Settings
The WLAN Settings screen lets you set up how other devices connect to the
Internet wirelessly using the MAX208M2W Series.
Chapter 3Setup Wizard
Figure 14 Setup Wizard > WLAN Settings
MAX208M2W Series User s Guide
39
Page 40
Chapter 3Setup Wizard
Figure 15 Steup Wizard > WLAN Settings > Encryption Type: WPA Personall
The following table describes the labels in this screen.
Table 10 Setup Wizard > WLAN Settings
LABEL DESCRIPTION
Wifi Settings
Enable WLAN
WLAN Mode
WLAN Channel
SSID Settings
WLAN SSID This field dilsplays the name of the wireless network associated with the
Hide SSID
Encryption
Type
SSID WEP Settings
Select this box to enable the wireless service and allow other
wireless clients to connect to the Internet using the MAX208M2W
Series.
Select the mode that the MAX208M2W Series will be using to
communicate: 802.11 B/G/N mixed, 802.11 B/G mixed, 802.11
B only, 802.11 G only, or 802.11 N only.
Select one channel from 1 to 13 for wireless communications
with the wireless stations.
MAX208M2W Series.
Select this option if you wish to keep the name of the wireless
network hidden.
Select the type of encryption that the network will be using:
None, WEP, or WPA Personal.
40
Note: You will only see this options if you selected WEP as the Encryption Type.
Authentication
Method
WEP Encryption
Length
Key 1 - 4
SSID WPA Settings
Select the type of authentication used to join the network:
Openn System or Shared Key.
Select the length of the encryption key: 64-bit or 128-bit.
Pick one of four available keys. The key can be in either
Hexagecimal (HEX) or ASCII format.
Type the key using any letters and numbers. The field is case
sensitive and the lenght must match the length picked in the
step above (64-bit or 128-bit). A warning mesage will appear if
you fail to do this.
MAX208M2W Series User s Guide
Page 41
Table 10 Setup Wizard > WLAN Settings (continued)
LABEL DESCRIPTION
WPA ModeSelect either WPA, WPA2 or Auto (WPA or WPA2).
Cipher TypeSelect the type of authentication that you wish to use for your network:
TKIP, AES or both. AES is more secure.
Pre Shared KeyType the pre-shared key or PSK previously shared between the two
parties.
3.1.7 Setup Complete
Click Save to save the Setup Wizard settings and close it.
Figure 16 Setup Wizard > Setup Complete
Chapter 3Setup Wizard
Launch your web browser and navigate to www.zyxel.com. If everything was
configured properly, the web page should display. You can now surf the Internet!
Refer to the rest of this guide for more detailed information on the complete range
of MAX208M2W Series features available in the more advanced web configurator.
Note: If you cannot access the Internet, open the web configurator again to confirm
that the Internet settings you configured in the wizard setup are correct.
MAX208M2W Series User s Guide
41
Page 42
Chapter 3Setup Wizard
42
MAX208M2W Series User s Guide
Page 43
CHAPTER 4
Tutorials
4.1 Overview
This chapter shows you how to configure some of the MAX208M2W Series s
features.
Note: Be sure to read Introducing the Web Configurator on page 25 before working
through the tutorials presented here. For field descriptions for individual
screens, see the related technical reference in this User's Guide.
This chapter includes the following configuration examples:
! WiMAX Connection Settings on page 43
! Configuring LAN DHCP on page 44
! Changing Certificate on page 46
! Blocking Web Access on page 47
! Configuring the MAC Address Filter, see page48
! Setting Up NAT Port Forwarding, see page 50
! Access the MAX208M2W Series Using DDNS, see page 53
! Configuring Static Route for Routing to Another Network, see page 54
! Remotely Managing Your MAX208M2W Series on page 57
! VLAN Configuration Example on page 58
4.2 WiMAX Connection Settings
This tutorial provides you with pointers for configuring the MAX208M2W Series to
connect to an ISP.
1 Connect the MAX208M2W Series to the ISP s nearest base station. See Section 6.2
on page 73.
2 Configure the MAX208M2W Series s broadcast frequency. Section 6.3 on page 75.
MAX208M2W Series User s Guide
43
Page 44
Chapter 4Tutorials
3 Configure the MAX208M2W Series to connect securely to the ISP s authentication
servers. See Section 6.4 on page 78.
4 Check the MAX208M2W Series s connection status to ensure everything is working
properly. See Section 6.7 on page 85.
4.3 Configuring LAN DHCP
This tutorial shows you how to set up a small network in your office or home.
Goal: Connect three computers to your MAX208M2W Series to form a small
network.
44
Required: The following table provides a summary of the information you will
need to complete the tasks in this tutorial.
INFORMATION VALUE SEE ALSO
LAN IP Address192.168.100.1 Chapter 7 on page 99
Starting IP Address192.168.100.10 Chapter 7 on page 100
Ending IP Address192.168.100.30
DNS ServersFrom ISP
1 In the Web Configurator, open the Networking Setting > LAN screen and set
the IP Address to 192.168.100.1. Use the default IP Subnet Mask of
255.255.255.0. Click Save.
MAX208M2W Series User s Guide
Page 45
Chapter 4Tutorials
2 Manually change the IP address of your computer that your are using to
192.168.100.x (for example, 192.168.100.5) and keep the subnet set to
255.255.255.0.
3 Type http://192.168.100.1 in your browser after the MAX208M2W Series finishes
starting up completely.
4 Log into the Web Configurator and open the Networking Setting > LAN >
DHCP screen.
5 Select Server for the DHCP mode, then enter 192.168.100.10 and
192.168.100.30 as your DHCP starting and ending IP addresses.
6 Leave the other settings as their defaults and click Save.
7 Next, go to the Networking Setting > WAN screen and select NAT in the
Operation Mode field. Click Save.
MAX208M2W Series User s Guide
45
Page 46
Chapter 4Tutorials
8 Connect your computers to the MAX208M2W Series s Ethernet ports and you re all
set!
Note: You may need to configure the computers on your LAN to automatically obtain
IP addresses. For information on how to do this, see Appendix B on page 209.
Once your network is configured and hooked up, you will want to connect it to the
Internet next. To do this, just run the Internet Connection Wizard (Chapter 3
on page 31), which walks you through the process.
4.4 Changing Certificate
This tutorial shows you how to import a new security certificate, which allows your
device to communicate with another network servers.
Goal: Import a new security certificate into the MAX208M2W Series.
See Also: Appendix E on page 259.
1 Go to the WiMAX > Profile > Authentication Settings screen. In the EAP
Supplicant section, click each Browse button and locate the security certificates
that were provided by your new ISP.
s
2 Configure your new Internet access settings based on the information provided by
the ISP.
Note: You can also use the Internet Connection Wizard to configure the Internet
access settings.
46
MAX208M2W Series User s Guide
Page 47
3 You may need to configure the Options section according to the information
provided by the ISP.
4 Click Save. You should now be able to connect to the Internet through your new
service provider!
4.5 Blocking Web Access
If your MAX208M2W Series is in a home or office environment you may decide
that you want to block an Internet website access. You may need to block both the
website s IP address and domain name.
Chapter 4Tutorials
Goal: Configure the MAX208M2W Series s content filter to block a website with a
domain name www.example.com.
See Also: Section 7.21 on page 126.
1 Open the Networking Setting > Content Filter.
2 Select Enable URL Filter.
3 Select Blacklist.
4 Click Add and configure a URL filter rule by selecting Active and entering
www.example.com as the URL.
5 Click OK.
MAX208M2W Series User s Guide
47
Page 48
Chapter 4Tutorials
6 Click Save.
Open a browser from your computer in the MAX208M2W Series s LAN network,
you should get an "Access Violation# message when you try to access to http://
www.example.com. You may also need to block the IP address of the website if
you do not want users to access to the website through its IP address.
4.6 Configuring the MAC Address Filter
This tutorial shows you how to use the MAC filter to block a DHCP client s access to
hosts and to the WiMAX network.
48
MAX208M2W Series User s Guide
Page 49
Chapter 4Tutorials
1 First of all, you have to know the MAC address of the computer. If not, you can
look for the MAC address in the Network Setting > LAN > DHCP screen.
(192.168.100.3 mapping to 00:02:E3:53:16:95 in this example).
2 Click Security > Firewall > MAC Filter. Select Blacklist and click the Add
button in the MAC Filter Rules table.
MAX208M2W Series User s Guide
49
Page 50
Chapter 4Tutorials
3 An empty entry appears. Enter the computer s MAC address in the Source MAC
field and leave the other fields set to their defaults. Click Save.
The computer will no longer be able to access any host on the WiMAX network
through the MAX208M2W Series.
4.7 Setting Up NAT Port Forwarding
Thomas recently received an Xbox 360 as his birthday gift. His friends invited him
to play online games with them on Xbox LIVE. In order to communicate and play
with other gamers on Xbox LIVE, Thomas needs to configure the port settings on
his MAX208M2W Series.
Xbox 360 requires the following ports to be available in order to operate Xbox
LIVE correctly:
TCP: 53, 80, 3074
UDP: 53, 88, 3074
1 You have to know the Xbox 360 s IP address first. You can check it through the
Xbox 360 console. You may be able to check the IP address on the MAX208M2W
Series if the MAX208M2W Series has assigned a DHCP IP address to the Xbox 360.
Check the DHCP Leased Hosts table in the Network > LAN > DHCP screen.
Look for the IP address for the Xbox 360.
50
MAX208M2W Series User s Guide
Page 51
Chapter 4Tutorials
2 NAT mode is required to use port forwarding. Click Network Setting > WAN and
make sure NAT is selected in the Operation Mode field. Click Save.
3 Click Network Setting > NAT > Port Forwarding and then click the first entry
to edit the rule.
4 Configure the screen as follows to open TCP/UDP port 53 for the Xbox 360. Click
OK.
MAX208M2W Series User s Guide
51
Page 52
Chapter 4Tutorials
5 Repeat steps 2 and 3 to open the rest of the ports for the Xbox 360. The port
forwarding settings you configured are listed in the Port Forwarding screen.
6 Click Save.
Thomas can then connect his Xbox 360 to the Internet and play online games with
his friends.
In this tutorial, all port 80 traffic is forwarded to the Xbox 360, but port 80 is also
the default listening port for remote management via WWW. If Thomas also wants
to manage the MAX208M2W Series from the Internet, he has to assign an unused
port to WWW remote access.
Click Advanced > Remote MGMT. Enter an unused port in the Port field (81 in
this example). Click Save.
52
MAX208M2W Series User s Guide
Page 53
Chapter 4Tutorials
4.8 Access the MAX208M2W Series Using DDNS
If you connect your MAX208M2W Series to the Internet and it uses a dynamic
WAN IP address, it is inconvenient for you to manage the device from the
Internet. The MAX208M2W Series s WAN IP address changes dynamically.
Dynamic DNS (DDNS) allows you to access the MAX208M2W Series using a
domain name.
http://mywimax.dyndns.org
A
w.x.y.z
To use this feature, you have to apply for DDNS service at www.dyndns.org.
This tutorial covers:
! Registering a DDNS Account on www.dyndns.org
! Configuring DDNS on Your MAX208M2W Series
! Testing the DDNS Setting
a.b.c.d
Note: If you have a private WAN IP address (see Private IP Addresses on page 256),
then you cannot use DDNS.
4.8.1 Registering a DDNS Account on www.dyndns.org
1 Open a browser and type http://www.dyndns.org.
2 Apply for a user account. This tutorial uses UserName1 and 12345 as the
username and password.
3 Log into www.dyndns.org using your account.
4 Add a new DDNS host name. This tutorial uses the following settings as an
example.
! Hostname: mywimax.dyndns.org
! Service Type: Host with IP address
! IP Address: Enter the WAN IP address that your MAX208M2W Series is currently
using. You can find the IP address on the MAX208M2W Series s Web
Configurator Status page.
Then you will need to configure the same account and host name on the
MAX208M2W Series later.
MAX208M2W Series User s Guide
53
Page 54
Chapter 4Tutorials
4.8.2 Configuring DDNS on Your MAX208M2W Series
Configure the following settings in the Network Setting > DDNS screen.
1 Select Enable Dynamic DNS.
2 Select dyndns.org for the
service provider.
3 Select Dynamic for the
service type.
4 Type mywimax.dyndns.org
in the Domain Name field.
5 Enter the user name
(UserName1) and password
(12345).
6 Select WAN IP for the IP update policy.
7 Click Save.
4.8.3 Testing the DDNS Setting
Now you should be able to access the MAX208M2W Series from the Internet. To
test this:
1 Open a web browser on the computer (using the IP address a.b.c.d) that is
connected to the Internet.
2 Type http://mywimax.dyndns.org and press [Enter].
3 The MAX208M2W Series s login page should appear. You can then log into the
MAX208M2W Series and manage it.
4.9 Configuring Static Route for Routing to
Another Network
In order to extend your Intranet and control traffic flowing directions, you may
connect a router to the MAX208M2W Series s LAN. The router may be used to
separate two department networks. This tutorial shows how to configure a static
routing rule for two network routings.
54
MAX208M2W Series User s Guide
Page 55
Chapter 4Tutorials
In the following figure, router R is connected to the MAX208M2W Series s LAN. R
connects to two networks, N1 (192.168.1.x/24) and N2 (192.168.10.x/24). If
you want to send traffic from computer A (in N1 network) to computer B (in N2
network), the traffic is sent to the MAX208M2W Series s WAN default gateway by
default. In this case, computer B will never receive the traffic.
N1
A
R
N2
B
You need to specify a static routing rule on the MAX208M2W Series to specify R as
the router in charge of forwarding traffic to N2. In this case, the MAX208M2W
Series routes traffic from computer A to R and then R routes the traffic to
computer B.
N1
A
R
N2
B
MAX208M2W Series User s Guide
55
Page 56
Chapter 4Tutorials
This tutorial uses the following example IP settings:
Table 11 IP Settings in this Tutorial
DEVICE / COMPUTER IP ADDRESS
The MAX208M2W Series s
WAN
The MAX208M2W Series s LAN192.168.1.1
A 192.168.1.34
R s IP address on N1 192.168.1.253
R s IP address on N2 192.168.10.2
B 192.168.10.33
To configure a static route to route traffic from N1 to N2:
1 Click Network Setting > Route > Static Route.
2 Click Add to create a new route.
172.16.1.1
3 Configure the Edit Static Route screen using the following settings:
3a Enter 192.168.10.0 and subnet mask 255.255.255.0 for the destination,
N2.
3b Enter 192.168.1.253 (R s IP address on N1) in the IP Address field under
Next Hop.
3a Click Save.
Now computer B should be able to receive traffic from computer A. You may need
to additionally configure R s firewall settings to accept specific traffic to pass
through.
56
MAX208M2W Series User s Guide
Page 57
Chapter 4Tutorials
4.10 Remotely Managing Your MAX208M2W
Series
The remote management feature allows you to log into the device through the
Internet.
Goal: Set up the MAX208M2W Series to allow management requests from the
WAN (Internet).
See Also: Section 12.3 on page 169.
1 Open the Maintenance > Remote MGMT > HTTP screen.
2 Select Enable in both HTTP Server and HTTPS Server sections and leave the
Port Number settings as "80# and "443#.
3 Select Allow Connection from WAN. This allows remote management
connections not only from the local network but also the WAN network (Internet).
4 Click Save.
MAX208M2W Series User s Guide
57
Page 58
Chapter 4Tutorials
4.11 VLAN Configuration Example
This example assumes that you want port 1 to recognize VLAN 100 and VLAN 200
traffic sent from/to computers A and B. Port 2 is dedicated for transmitting and
receiving VLAN-untagged and management traffic.
Figure 17 VLAN Configuration Example
A
VLAN 100
B
1 Connect your computer (C in the example) to the MAX208M2W Series s LAN port 2
and access the Web Configurator.
2 Log into the MAX208M2W Series.
VLAN 200
C
port 1
port 2
58
MAX208M2W Series User s Guide
Page 59
Chapter 4Tutorials
3 Click Network Setting > VLAN and then click the PVID Group for port 2.
4 Select MGMT from the drop-down list, click OK in the section, and then click Save
at the bottom of the screen.
MAX208M2W Series User s Guide
59
Page 60
Chapter 4Tutorials
5 Click Network Setting > WAN. Change the MAX208M2W Series to bridge mode
and then click Save.
6 The MAX208M2W Series will restart. Wait until it completely restarts.
7 Configure the IP address of your computer to be in the same network as the
MAX208M2W Series s LAN. The default is 192.168.1.x where x can be 2 to 254.
8 Open a browser and type the MAX208M2W Series s LAN IP address (for example,
192.168.1.1).
9 Log into the MAX208M2W Series and then click Network Setting > VLAN.
10 Enable VLAN and create VLAN 100 by entering VLAN 100 and the priority (7 in this
example) in the Management VLAN section. The MAX208M2W Series requires to
reboot again.
11 After it completely restarts, log into the MAX208M2W Series. Click Network
Setting > VLAN.
60
MAX208M2W Series User s Guide
Page 61
Chapter 4Tutorials
12 Since by default port 1 is associated with VLAN rule 1. Click the VID field to
configure the settings as shown next. Click OK and then Save.
Finally, you complete the settings. See Section 7.19 on page 122 if you need more
information about VLAN.
MAX208M2W Series User s Guide
61
Page 62
Chapter 4Tutorials
62
MAX208M2W Series User s Guide
Page 63
PART II
Technical Reference
63
Page 64
64
Page 65
CHAPTER 5
System Status
5.1 Overview
Use this screen to view a summary of your MAX208M2W Series connection status.
5.2 System Status
This screen allows you to view the current status of the device, system resources,
and interfaces (LAN and WAN).
Click System Status to open this screen as shown next.
Figure 18 System Status
MAX208M2W Series User s Guide
65
Page 66
Chapter 5System Status
The following tables describe the labels in this screen.
Table 12 Status
LABEL DESCRIPTION
System Information
System Model
Name
Software
Version
Firmware
Version
Firmware
Build Time
TimeThis field displays the current system time.
UptimeThis field displays how long the MAX208M2W Series has been running
System Resources
MemoryThis field displays what percentage of the MAX208M2W Series s
CPUThis field displays what percentage of the MAX208M2W Series s CPU is
WiMAX
Device StatusThis field displays the MAX208M2W Series current status for
This field displays the MAX208M2W Series system model name. It is
used for identification.
This field displays the Web Configurator version number.
This field displays the current version of the firmware inside the
device.
This field shows the date the firmware version was created.
since it last started up.
memory is currently used. The higher the memory usage, the more
likely the MAX208M2W Series is to slow down. Some memory is
required just to start the MAX208M2W Series and to run the web
configurator. You can reduce the memory usage by disabling some
services; by reducing the amount of memory allocated to NAT and
firewall rules (you may have to reduce the number of NAT rules or
firewall rules to do so); or by deleting rules in functions such as
incoming call policies, speed dial entries, and static routes.
currently used. The higher the CPU usage, the more likely the
MAX208M2W Series is to slow down.
connecting to the selected base station.
66
Scanning - The MAX208M2W Series is scanning for available base
stations.
Ready - The MAX208M2W Series has finished a scanning and you can
connect to a base station.
Connecting - The MAX208M2W Series attempts to connect to the
selected base station.
Connected - The MAX208M2W Series has successfully connected to
the selected base station.
MAX208M2W Series User s Guide
Page 67
Chapter 5System Status
Table 12 Status (continued)
LABEL DESCRIPTION
Connection
Status
BSIDThis field displays the MAC address of the base station to which the
FrequencyThis field indicates the frequency the MAX208M2W Series is using.
Signal
Strength
Link QualityThis field indicates the relative quality of the link the MAX208M2W
WAN
StatusThis field indicates the status of the WAN connection to the
MAC AddressThis field indicates the MAC address of the port making the WAN
IP AddressThis field indicates the current IP address of the MAX208M2W Series in
Subnet MaskThis field indicates the current subnet mask on the WAN.
GatewayThis field indicates the IP address of the gateway to which the
MTUThis field indicates the Maximum Transmission Unit (MTU) between the
DNSThis field indicates the Domain Name Server (DNS) to which your
LAN
MAC AddressThis field indicates the MAC address of the port making the LAN
IP AddressThis field displays the current IP address of the MAX208M2W Series in
Subnet MaskThis field displays the current subnet mask in the LAN.
MTUThis field indicates the Maximum Transmission Unit (MTU) between the
VOIP Phone
Account1
Subscriber
Registered
Status
Account2
Subscriber
This field displays the status of the WiMAXconnection between the
MAX208M2W Series and the base station.
Network Search - The MAX208M2W Series is scanning for any
available WiMAX connections.
Disconnected - No WiMAX connection is available.
Network Entry - A WiMAX connection is initializing.
Normal - The WiMAX connection has successfully established.
device is connected.
This field indicates the strength of the connection that the
MAX208M2W Series has with the base station.
Series has with the base station.
MAX208M2W Series.
connection on the MAX208M2W Series.
the WAN.
MAX208M2W Series is connected.
MAX208M2W Series and the ISP servers to which it is connected.
MAX208M2W Series is connected.
connection on the MAX208M2W Series.
the LAN.
MAX208M2W Series and the client devices to which it is connected.
This field displays the SIP number for SIP account 1.
This field displays whether SIP account 1 is already registered with a
SIP server (Registered or Unregistered).
This field displays the SIP number for SIP account 2.
MAX208M2W Series User s Guide
67
Page 68
Chapter 5System Status
Table 12 Status (continued)
LABEL DESCRIPTION
Registered
Status
Line1 StatusThis field displays whether phone line 1 (mapping to the VoIP1 port)
Line 2 StatusThis field displays whether phone line 2 (mapping to the VoIP2 port)
This field displays whether SIP account 2 is already registered with a
SIP server (Registered or Unregistered).
is in use or not (idle).
is in use or not (idle).
68
MAX208M2W Series User s Guide
Page 69
CHAPTER 6
WiMAX
6.1 Overview
This chapter shows you how to set up and manage the connection between the
MAX208M2W Series and your ISP s base stations.
6.1.1 What You Need to Know
The following terms and concepts may help as you read through this chapter.
WiMAX
WiMAX (Worldwide Interoperability for Microwave Access) is the IEEE 802.16
wireless networking standard, which provides high-bandwidth, wide-range
wireless service across wireless Metropolitan Area Networks (MANs). ZyXEL is a
member of the WiMAX Forum, the industry group dedicated to promoting and
certifying interoperability of wireless broadband products.
In a wireless MAN, a wireless-equipped computer is known either as a mobile
station (MS) or a subscriber station (SS). Mobile stations use the IEEE 802.16e
standard and are able to maintain connectivity while switching their connection
from one base station to another base station (handover) while subscriber stations
use other standards that do not have this capability (IEEE 802.16-2004, for
example). The following figure shows an MS-equipped notebook computer MS1
moving from base station BS1 s coverage area and connecting to BS2.
Figure 19 WiMax: Mobile Station
MAX208M2W Series User s Guide
69
Page 70
Chapter 6WiMAX
WiMAX technology uses radio signals (around 2 to 10 GHz) to connect subscriber
stations and mobile stations to local base stations. Numerous subscriber stations
and mobile stations connect to the network through a single base station (BS), as
in the following figure.
Figure 20 WiMAX: Multiple Mobile Stations
A base station s coverage area can extend over many hundreds of meters, even
under poor conditions. A base station provides network access to subscriber
stations and mobile stations, and communicates with other base stations.
The radio frequency and bandwidth of the link between the MAX208M2W Series
and the base station are controlled by the base station. The MAX208M2W Series
follows the base station s configuration.
Authentication
When authenticating a user, the base station uses a third-party RADIUS or
Diameter server known as an AAA (Authentication, Authorization and Accounting)
server to authenticate the mobile or subscriber stations.
The following figure shows a base station using an AAA server to authenticate
mobile station MS, allowing it to access the Internet.
Figure 21 Using an AAA Server
In this figure, the dashed arrow shows the PKM (Privacy Key Management)
secured connection between the mobile station and the base station, and the solid
arrow shows the EAP secured connection between the mobile station, the base
station and the AAA server. See the WiMAX security appendix for more details.
70
MAX208M2W Series User s Guide
Page 71
Chapter 6WiMAX
Frequency Ranges
The following figure shows the MAX208M2W Series searching a range of
frequencies to find a connection to a base station.
Figure 22 Frequency Ranges
In this figure, A is the WiMAX frequency range. "WiMAX frequency range# refers to
the entire range of frequencies the MAX208M2W Series is capable of using to
transmit and receive (see the Product Specifications appendix for details).
In the figure, B shows the operator frequency range. This is the range of
frequencies within the WiMAX frequency range supported by your operator
(service provider).
The operator range is subdivided into bandwidth steps. In the figure, each C is a
bandwidth step.
The arrow D shows the MAX208M2W Series searching for a connection.
Have the MAX208M2W Series search only certain frequencies by configuring the
downlink frequencies. Your operator can give you information on the supported
frequencies.
The downlink frequencies are points of the frequency range your MAX208M2W
Series searches for an available connection. Use the Site Survey screen to set
these bands. You can set the downlink frequencies anywhere within the WiMAX
frequency range. In this example, the downlink frequencies have been set to
search all of the operator range for a connection.
Certification Authority
A Certification Authority (CA) issues certificates and guarantees the identity of
each certificate owner. There are commercial certification authorities like
CyberTrust or VeriSign and government certification authorities. You can use the
MAX208M2W Series to generate certification requests that contain identifying
information and public keys and then send the certification requests to a
certification authority.
MAX208M2W Series User s Guide
71
Page 72
Chapter 6WiMAX
Certificate File Formats
The certification authority certificate that you want to import has to be in one of
these file formats:
! Binary X.509: This is an ITU-T recommendation that defines the formats for
X.509 certificates.
! PEM (Base-64) encoded X.509: This Privacy Enhanced Mail format uses
lowercase letters, uppercase letters and numerals to convert a binary X.509
certificate into a printable form.
! Binary PKCS#7: This is a standard that defines the general syntax for data
(including digital signatures) that may be encrypted. The MAX208M2W Series
currently allows the importation of a PKS#7 file that contains a single
certificate.
! PEM (Base-64) encoded PKCS#7: This Privacy Enhanced Mail (PEM) format uses
64 ASCII characters to convert a binary PKCS#7 certificate into a printable
form.
CINR
Carrier to Interference-plus-Noise Ratio (CINR) measures the effectiveness of a
wireless signal and plays an important role in allowing the MAX208M2W Series to
decode signal burts. If a burst has a high signal strength and a high interferenceplus-noise ratio, it can use Digital Signal Processing (DSP) to decode it; if the
signal strength is lower, it can switch to an alternate burst profile.
RSSI
Received Signal Strength Indicator (RSSI) measures the relative strength of a
given wireless signal. This is important in determining if a signal is below the
Clear-To-Send (CTS) threshold. If it is below the arbitrarily specified threshold,
then MAX208M2W Series is free to transmit any data packets.
EAP Authentication
EAP (Extensible Authentication Protocol) is an authentication protocol that runs on
top of the IEEE 802.1x transport mechanism in order to support multiple types of
user authentication. By using EAP to interact with an EAP-compatible RADIUS
server, an access point helps a wireless station and a RADIUS server perform
authentication.
The MAX208M2W Series supports EAP-TLS and EAP-TTLS (at the time of writing,
TTLS is not available in Windows Vista) . For EAP-TLS authentication type, you
must first have a wired connection to the network and obtain the certificate(s)
from a certificate authority (CA). Certificates (also called digital IDs) can be used
to authenticate users and a CA issues certificates and guarantees the identity of
each certificate owner.
72
MAX208M2W Series User s Guide
Page 73
6.2 Connection Settings
This screen allows you to configure how the MAX208M2W Series connects to the
base stations on the WiMAX network.
Click WiMAX > Profile > Connection Settings to open this screen as shown
next.
Figure 23 Connection Settings Screen
Chapter 6WiMAX
This screen contains the following fields:
Table 13 Connection Settings
LABEL DESCRIPTION
Connection Option Settings
Auto
Reconnect
Auto
Connect
Mode
Enable
Handover
Enable Idle
Mode
MAX208M2W Series User s Guide
Select the interval in seconds that the MAX208M2W Series waits after
getting disconnected from the base station before attempting to
reconnect.
Select the auto connect mode.
! By channel power - Auto connects to the base station if the signal
! By CINR - Auto connects to the base station if the signal-to-noise
Select this to maintain connectivity while the MAX208M2W Series
switches its connection from one base station to another base station.
Select this to have the MAX208M2W Series enter the idle mode after it
has no traffic passing through for a pre-defined period. Make sure your
base station also supports this before selecting this.
strength of the channel is sufficient for the MAX208M2W Series.
ratio is sufficient for the MAX208M2W Series.
73
Page 74
Chapter 6WiMAX
Table 13 Connection Settings (continued)
LABEL DESCRIPTION
Connection Type Settings
Idle Mode
Interval
CINR & RSSI
Refresh
Interval
LDRP (Low
Data Rate
Protection)
LDRP TX
Rate
LDRP RX
Rate
Mode SelectSelect how the MAX208M2W Series connects to the base station.
BSIDThis displays the MAC address of a base station within range of the
Preamble IDThe preamble ID is the index identifier in the header of the base
Set the idle duration in minutes. This is how long the MAX208M2W
Series waits during periods of no activity before going into idle mode.
Set the refresh interval in milliseconds for calculating the signal-tonoise measurement (CINR) and signal strength measurement (RSSI) of
the MAX208M2W Series.
Enter the Low Data Rate Protection (LDRP) time in milliseconds. If the
uplink/downlink data rate is smaller than the LDRP time, the
MAX208M2W Series sends a disconnect request to the base station.
Enter the outgoing data rates for LDRP in bytes per second.
Enter the incoming data rates for LDRP in bytes per second.
! Auto Connect Mode - The device connects automatically to the
first base station in range.
! Network Search Mode - The device scans for available base
stations then connects to the best one it can.
MAX208M2W Series.
station s broadcast messages. In the beginning of a mobile stations s
network entry process, it searches for the preamble and uses it to
additional channel information.
The preamble ID is used to synchronize the upstream and downstream
transmission timing with the base station.
Frequency
(MHz)
Bandwidth
(MHz)
RSSI (dBm)This field displays the Received Signal Strength Indication (RSSI),
CINR (dB)
R3/R1
SearchClick this to have the MAX208M2W Series scan for base stations.
This field displays the radio frequency of the MAX208M2W Series s
connection to the base station.
This field displays the bandwidth of the base station in megahertz
(MHz).
which is an overal measurement of radio signal strength. A higher RSSI
level indicates a stronger signal.
This field displays the average Carrier to Interference plus Noise Ratio
for the current connection. This value is an indication of overal radio
signal quality, where a higher value means a better quality signal.
74
MAX208M2W Series User s Guide
Page 75
6.3 Frequency Settings
Use this screen to have the WiMAX Device to scan one or more specific radio
frequencies (given by your WiMAX service provider) to find available connections
to base stations.
Click WiMAX > Profile > Frequency Settings to open this screen as shown
next.
Figure 24 Frequency Settings Screen (By List)
A
B
Chapter 6WiMAX
Figure 25 Frequency Settings Screen (By Range)
A
B
MAX208M2W Series User s Guide
75
Page 76
Chapter 6WiMAX
This screen contains the following fields:
Table 14 Frequency Settings
LABEL DESCRIPTION
Setting TypeSelect whether to scan base stations by entering specific frequency(-
Join Wide Scan
Result
Default
Bandwidth
A (When By List is selected in the Setting Type field)
Frequency
(KHz)
ies) (By List) or a range of frequencies (By Range).
Note: When you select By Range, you can only configure one
range of frequencies in this screen. To configure multiple
frequency ranges, use the WiMAX > Wide Scan screen.
Note: Some settings in this screen are only available depending on
the Setting Type selected.
The scanning result of the frequency to scan you configured in this
screen will be shown in the WiMAX > Connect screen. Select this
option to determine whether to also append the wide scanning result
(configured in the WiMAX > Wide Scan screen) to the same table.
Select the default bandwidth (size) per frequency band you specify in
table A.
This displays the center frequency of an frequency band in kilohertz
(KHz).
Click the number to modify it.
Enter the center frequency in this field when you are adding an entry.
Bandwidth
(MHz)
DeleteClick this button to remove an item from the list.
AddClick this button to add an item to the list.
OKClick this button to save any changes made to the list.
A (When By Range is selected in the Setting Type field)
Start
Frequency
(KHz)
End
Frequency
(KHz)
Step (KHz)This indicates the frequency step within each band in kilohertz (KHz).
Bandwidth
(MHz)
This displays the bandwidth of the frequency band in megahertz (MHz).
If you set a center frequency to 3400000 KHz with the bandwidth of 10
MHz, then the frequency band is from 3399500 to 3400500 KHz.
Click the number to modify it.
Enter the bandwidth of the frequency band in this field when you are
adding an entry.
This indicates the beginning of a frequency band in kilohertz (KHz).
Click this field to modify it.
Enter the beginning frequency when you are adding an entry.
This indicates the end of the frequency band in kilohertz (KHz).
Click this field to modify it.
Click this field to modify it.
This indicates the bandwidth in megahertz (MHz).
Click this field to modify it.
76
MAX208M2W Series User s Guide
Page 77
Chapter 6WiMAX
Table 14 Frequency Settings (continued)
LABEL DESCRIPTION
OKClick this button to save any changes made to the list.
Valid Band Info (B)
This table displays the entire frequency band the MAX208M2W Series supports. The
frequenc(ies) to scan that you configured in table A must be within this range.
Band Start
(KHz)
Band End
(KHz)
This indicates the beginning of the frequency band in kilohertz (KHz).
This indicates the end of the frequency band in kilohertz (KHz).
MAX208M2W Series User s Guide
77
Page 78
Chapter 6WiMAX
6.4 Authentication Settings
These settings allow the WiMAX Device to establish a secure (authenticated)
connection with the service provider.
Click WiMAX > Profile > Authentication Settings to open this screen as shown
next.
Figure 26 Authentication Settings Screen
78
MAX208M2W Series User s Guide
Page 79
Chapter 6WiMAX
This screen contains the following fields:
Table 15 Authentication Settings
LABEL DESCRIPTION
Authentication
Mode
Data Encryption
AES-CCMSelect this to enable AES-CCM encryption. CCM combines counter-mode
AES-CBCSelect this to enable AES-CBC encryption. CBC creates message
Key Encryption
AES-key
wrap
AES-ECBSelect this to divide cryptographic keys into blocks and encrypt them
EAP Supplicant
EAP ModeSelect an Extensible Authentication Protocol (EAP) mode.
Select the authentication mode from the list.
The MAX208M2W Series supports the following authentication modes:
! No authentication
! User authentication
! Device authentication
! User and device authentication
encryption with CBC-MAC authentication.
authentication code from a block cipher.
Select this encapsulate cryptographic keys in a symmetric encryption
algorithm.
separately.
The MAX208M2W Series supports the following:
! EAP-TLS - In this protocol, digital certifications are needed by both
the server and the wireless clients for mutual authentication. The
server presents a certificate to the client. After validating the
identity of the server, the client sends a different certificate to the
server. The exchange of certificates is done in the open before a
secured tunnel is created. This makes user identity vulnerable to
passive attacks. A digital certificate is an electronic ID card that
authenticates the sender s identity. However, to implement EAP-TLS,
you need a Certificate Authority (CA) to handle certificates, which
imposes a management overhead.
! EAP-TTLS - This protocol is an extension of the EAP-TLS
authentication that uses certificates for only the server-side
authentications to establish a secure connection. Client
authentication is then done by sending username and password
through the secure connection, thus client identity is protected. For
client authentication, EAP-TTLS supports EAP methods and legacy
authentication methods such as PAP, CHAP, MS-CHAP and MS-CHAP
v2.
Anonymous IDEnter the anonymous ID used for EAP supplicant authentication.
Server Root
CA Cert File
Server Root
CA Info
Device Cert
File
Device Cert
Info
Browse for and choose a server root certificate file, if required.
This field displays information about the assigned server root
certificate.
Browse for and choose a device certificate file, if required.
This field displays information about the assigned device certificate.
MAX208M2W Series User s Guide
79
Page 80
Chapter 6WiMAX
Table 15 Authentication Settings (continued)
LABEL DESCRIPTION
Options
Device
Private Key
Device
Private Key
Info
Device
Private Key
Password
Inner ModeSets the EAP-TTLS inner mode.
UsernameEnter the username required for the EAP-TTLS inner method.
PasswordEnter the password required for the EAP-TTLS inner method.
Enable Auth
Mode
Decoration
in EAP Outer
ID
Enable
Service
Mode
Decoration
in EAP Outer
ID
Random
Outer ID
Ignore Cert
Verification
Same EAP
OuterID in
ReAuth
MAC address
in EAP-TLS
outer Id
Browse for and choose a device private key, if required.
This field displays information about the assigned device private key.
Enter the device private key, if required.
The MAX208M2W Series supports the following:
! MS-CHAP v2 - This is version 2 of Microsoft s variant of Challenge
Handshake Authentication Protocol (CHAP). It allows for mutual
authentication between devices.
! MS-CHAP - This is Microsoft s variant of Challenge Handshake
Authentication Protocol (CHAP). It allows for mutual authentication
between devices.
! CHAP - The Challenge Handshake Authentication Protocol (CHAP)
uses PPP to authenticate remote devices using a three-way
handshake and shared secret verification.
! MD5 - Message-Digest, algorithm 5, (MD5) encryption is typically
used for checking file integrity. Because this encryption protocol
contains a number of serious security flaws it is generally not
recommended that you use it for authentication security.
! PAP - Password Authentication Protocol uses unencrypted plaintext
to send a passwords for authentication over the network. It s
probably not a good idea to rely on this for security.
Select this to enable authentication mode.
Select this to enable service mode.
Select this to allow the MAX208M2W Series to generate a 16-byte
random number as a username for the EAP Identity Response message.
Select this to ignore base station certification verification when a
certificate is received during EAP-TLS or EAP-TTLS.
Select this to use the same EAP to the outer ID when reauthenticating.
Adds the MAC address of the MAX208M2W Series to the outer ID while
the EAP mode is set to EAP-TLS.
80
MAX208M2W Series User s Guide
Page 81
Table 15 Authentication Settings (continued)
LABEL DESCRIPTION
Delete
existed Root
Certificate
file
Delete
existed
Device
Certificate
file
Delete
existed
Private Key
6.5 Connect
This screen allows you to view the available WiMAX frequency band(s) and base
station(s) the MAX208M2W Series found through scanning and choose a base
station to which to connect.
Chapter 6WiMAX
Select this to delete an existing root certificate file from the
MAX208M2W Series.
Select this to delete an existing device certificate file from the
MAX208M2W Series.
Select this to delete an existing private key from the MAX208M2W
Series.
Click WiMAX > Connect to open this screen as shown next.
Figure 27 Connect Screen
MAX208M2W Series User s Guide
81
Page 82
Chapter 6WiMAX
This screen contains the following fields:
Table 16 Connect
LABEL DESCRIPTION
Applied Frequency Information
This table shows the scanning result you made in the WiMAX > Profile > Frequency
Settings and WiMAX > Wide Scan screens.
Note: You cannot see the wide scanning result that you made in WiMAX > Wide
Available Network List
Scan screen if the Join Wide Scan Result is set to No in the WiMAX >
Profile > Frequency Settings screen.
Frequency
(KHz)
Bandwidth
(MHz)
Connected
Mode
ConnectClick this to connect to the selected base station.
DisconnectClick this to disconnect from the selected base station.
BSIDThis field displays the base station MAC address.
Preamble IDThis field displays the preamble ID.
This field displays the available center frequency of a frequency band in
kilohertz (KHz).
This field displays the bandwidth of the frequency band in megahertz
(MHz).
Select a connect mode:
! Auto Connect Mode - This allows the MAX208M2W Series to
connect to any of the base stations on the list automatically.
! Network Search Mode - This allows the MAX208M2W Series to
connect to a user-specified base station. Select this option, choose
a base station, click Connect.
The preamble ID is the index identifier in the header of the base
station s broadcast messages. In the beginning of a mobile stations s
network entry process, it searches for the preamble and uses it to
additional channel information.
The preamble ID is used to synchronize the upstream and downstream
transmission timing with the base station.
Frequency
(MHz)
Bandwidth
(MHz)
RSSI (dBm)This field displays the Received Signal Strength Indication (RSSI),
CINR (dB)
R3/R1
SearchClick this to have the MAX208M2W Series scan for base stations in the
Connected BS Info
This field displays the center frequency the base station uses in
kilohertz (KHz).
This field displays the frequency band bandwidth the base station uses
in megahertz (MHz).
which is an overal measurement of radio signal strength. A higher RSSI
level indicates a stronger signal.
This field displays the average Carrier to Interference plus Noise Ratio
for the current connection. This value is an indication of overal radio
signal quality, where a higher value means a better quality signal.
frequency band(s) listed in the Applied Frequency Information
table.
82
MAX208M2W Series User s Guide
Page 83
Chapter 6WiMAX
Table 16 Connect (continued)
LABEL DESCRIPTION
Device
Status
UMAC StateThis field displays the status of the WiMAXconnection between the
This field displays the MAX208M2W Series current status for connecting
to the selected base station.
Scanning - The MAX208M2W Series is scanning for available base
stations.
Ready - The MAX208M2W Series has finished scanning and you can
connect to a base station.
Connecting - The MAX208M2W Series attempts to connect to the
selected base station.
Connected - The MAX208M2W Series has successfully connected to
the selected base station.
MAX208M2W Series and the base station.
Network Search - The MAX208M2W Series is scanning for any
available WiMAX connections.
Disconnected - No WiMAX connection is available.
Network Entry - A WiMAX connection is initializing.
Normal - The WiMAX connection has been successfully established.
BSIDThis field displays the MAC address of the base station to which the
MAX208M2W Series is connected.
Frequency
(MHz)
RSSI (dBm)This field displays the Received Signal Strength Indication (RSSI),
CINR (dB)This field displays the average Carrier to Interference plus Noise Ratio
This field displays the frequency the base station uses in megahertz
(MHz).
which is an overal measurement of radio signal strength. A higher RSSI
level indicates a stronger signal.
for the current connection. This value is an indication of overal radio
signal quality, where a higher value means a better quality signal.
MAX208M2W Series User s Guide
83
Page 84
Chapter 6WiMAX
6.6 Wide Scan
This screen allows you to discover base stations by entering one or more
frequency ranges and bandwidth on which to scan.
Click WiMAX > Wide Scan to open this screen as shown next.
Figure 28 Wide Scan Screen
This screen contains the following fields:
Table 17 Wide Scan
LABEL DESCRIPTION
Wide Scan Settings
Auto Wide
Scan
Wide Scan Range
Start
Frequency
(KHz)
End
Frequency
(KHz)
Step (KHz)Enter the step increment in kilohertz (KHz) that the wide scan jumps
Bandwidth
(MHz)
DeleteClick this to remove a range of frequencies from the wide scan range
AddClick this to add a range of frequencies to the wide scan range list.
OKClick this so save any changes to the wide scan range list.
Wide Scan Result
Use this to enable (Yes) or disable (No) automatically scanning for
base stations.
Enter the start frequency in kilohertz (KHz) for a wide scan range.
Enter the end frequency in kilohertz (KHz) for a wide scan range.
each time it scans between the start and end frequencies.
Enter the frequency bandwidth to be scanned.
list.
84
This table displays the available frequency band(s) found through the wide scan.
MAX208M2W Series User s Guide
Page 85
Table 17 Wide Scan (continued)
LABEL DESCRIPTION
Frequency
(KHz)
Bandwidth
(MHz)
SearchClick this to initiate a wide scan.
ClearClick this to clear the wide scan results.
6.7 Link Status
This screen provides a general overview of the current WiMAX connection with the
service provider.
Click WiMAX > Link Status to open this screen as shown next.
Figure 29 Link Status Screen
Chapter 6WiMAX
This field displays the frequency in kilohertz (KHz).
This field displays the bandwidth in megahertz (MHz).
This screen contains the following fields:
Table 18 Link Status
LABEL DESCRIPTION
ProfileThis field displays the profile name.
BSIDThis field displays the MAC address of the base station to which the
MAX208M2W Series is currently connected.
RSSIThis field displays the Received Signal Strength Indication (RSSI),
which is an overal measurement of radio signal strength. A higher RSSI
level indicates a stronger signal.
CINR R3This field displays the average Carrier to Interference plus Noise Ratio
(R3) for the current connection. This value is an indication of overal
radio signal quality, where a higher value means a better quality signal.
MAX208M2W Series User s Guide
85
Page 86
Chapter 6WiMAX
Table 18 Link Status (continued)
LABEL DESCRIPTION
CINR R1This field displays the average Carrier to Interference plus Noise Ratio
CINR Std DevThis field displays the average Carrier to Interference plus Noise Ratio
FrequencyThis field displays the frequency in kilohertz (KHz).
TX PowerThis field displays the transmission power of the MAX208M2W Series in
UL MCSThis field displays the Uplink Modulation and Coding Sequence (UL
DL MCSThis field displays the Downlink Modulation and Coding Sequence (DL
RF TemperatureThis field displays the temperature in centigrade of the MAX208M2W
Handover
Success
Handover FailThis field displays how many times the MAX208M2W Series had been
(R1) for the current connection. This value is an indication of overal
radio signal quality, where a higher value means a better quality signal.
(Std Dev) for the current connection. This value is an indication of
overal radio signal quality, where a higher value means a better quality
signal.
dBm.
MCS).
MCS).
Series s RF circuit.
This field displays how many times the MAX208M2W Series had ever
successfully switched its connection from one base station to another
base station, since the MAX208M2W Series last restarted.
failed to switch its connection from one base station to another base
station, since the MAX208M2W Series last restarted.
86
MAX208M2W Series User s Guide
Page 87
6.8 Link Statistics
This screen provides a detailed overview of the current WiMAX connection with the
service provider..
Click WiMAX > Link Statistics to open this screen as shown next.
Figure 30 Link Statistics Screen
Chapter 6WiMAX
This screen contains the following sections:
Table 19 Link Statistics
LABEL DESCRIPTION
LinkThis section provides a detailed overview of link statistics.
HARQThis section provides a detailed overview of Hybrid Automatic Repeat
Request link statistics.
TX/RXThis section provides a detailed overview of transmission and receiving
link statistics.
MCSThis section provides a detailed overview of Modulation and Coding
Sequence (MCS) link statistics
MAX208M2W Series User s Guide
87
Page 88
Chapter 6WiMAX
6.9 Connection Info
This screen displays all of the connections made through the WiMAX device since
its last reboot.
Click WiMAX > Connection Info to open this screen as shown next.
Figure 31 Connection Info Screen
This screen contains the following fields:
Table 20 Connection Info
LABEL DESCRIPTION
Active
Connection CID
Connection
Type
This displays the unique, unidirectional 16-bit Connection Identifier
(CID) for an active connection.
This displays the type of connection.
6.10 Service Flow
This screen displays data priority information for all of the connections made
through the WiMAX device since its last reboot.
Click WiMAX > Service Flow to open this screen as shown next.
Figure 32 Service Flow Screen
This screen contains the following fields:
Table 21 Service Flow
LABEL DESCRIPTION
SFIDThis displays a 32-bit service flow identifier.
SF StatusThis display the service flow status.
SF DirectionThis displays the service flow direction.
88
MAX208M2W Series User s Guide
Page 89
CHAPTER 7
Network Setting
7.1 Overview
This chapter shows you how to configure the MAX208M2W Series s network
setting.
7.1.1 What You Need to Know
The following terms and concepts may help as you read through this chapter.
IP Address
IP addresses identify individual devices on a network. Every networking device
(including computers, servers, routers, printers, etc.) needs an IP address to
communicate across the network. These networking devices are also known as
hosts.
Subnet Masks
Subnet masks determine the maximum number of possible hosts on a network.
You can also use subnet masks to divide one network into multiple sub-networks.
DHCP
A DHCP (Dynamic Host Configuration Protocol) server can assign your
MAX208M2W Series an IP address, subnet mask, DNS and other routing
information when it s turned on.
MAX208M2W Series User s Guide
89
Page 90
Chapter 7Network Setting
DNS Server Address
DNS (Domain Name System) is for mapping a domain name to its corresponding
IP address and vice versa. The DNS server is extremely important because
without it, you must know the IP address of a machine before you can access it.
The DNS server addresses that you enter in the DHCP setup are passed to the
client machines along with the assigned IP address and subnet mask.
There are two ways that an ISP disseminates the DNS server addresses. The first
is for an ISP to tell a customer the DNS server addresses, usually in the form of an
information sheet, when s/he signs up. If your ISP gives you the DNS server
addresses, enter them in the DNS Server fields; otherwise, leave them blank.
Some ISPs choose to pass the DNS servers using the DNS server extensions of
PPP IPCP (IP Control Protocol) after the connection is up. If your ISP did not give
you explicit DNS servers, chances are the DNS servers are conveyed through IPCP
negotiation. The MAX208M2W Series supports the IPCP DNS server extensions
through the DNS proxy feature.
If the Primary and Secondary DNS Server fields are not specified, for instance,
left as 0.0.0.0, the MAX208M2W Series tells the DHCP clients that it itself is the
DNS server. When a computer sends a DNS query to the MAX208M2W Series, the
MAX208M2W Series forwards the query to the real DNS server learned through
IPCP and relays the response back to the computer.
Please note that DNS proxy works only when the ISP uses the IPCP DNS server
extensions. It does not mean you can leave the DNS servers out of the DHCP
setup under all circumstances. If your ISP gives you explicit DNS servers, make
sure that you enter their IP addresses. This way, the MAX208M2W Series can pass
the DNS servers to the computers and the computers can query the DNS server
directly without the MAX208M2W Series s intervention.
RIP Setup
RIP (Routing Information Protocol) allows a router to exchange routing
information with other routers. The RIP Direction field controls the sending and
receiving of RIP packets. When set to:
! RX/TX - the MAX208M2W Series will broadcast its routing table periodically and
incorporate the RIP information that it receives.
! RX Only - the MAX208M2W Series will not send any RIP packets but will accept
all RIP packets received.
! TX Only - the MAX208M2W Series will send out RIP packets but will not accept
any RIP packets received.
! None - the MAX208M2W Series will not send any RIP packets and will ignore
any RIP packets received.
90
MAX208M2W Series User s Guide
Page 91
Chapter 7Network Setting
The Version field controls the format and the broadcasting method of the RIP
packets that the MAX208M2W Series sends (it recognizes both formats when
receiving). RIP-1 is universally supported; but RIP-2 carries more information.
RIP-1 is probably adequate for most networks, unless you have an unusual
network topology.
Both RIP-2B and RIP-2M sends the routing data in RIP-2 format; the difference
being that RIP-2B uses subnet broadcasting while RIP-2M uses multicasting.
Port Forwarding
A NAT server set is a list of inside (behind NAT on the LAN) servers, for example,
web or FTP, that you can make accessible to the outside world even though NAT
makes your whole inside network appear as a single machine to the outside world.
With port forwarding, you can forward incoming service requests to the server(s)
on your local network. You may enter a single port number or a range of port
numbers to be forwarded, and the local IP address of the desired server. The port
number identifies a service; for example, web service is on port 80 and FTP on
port 21. In some cases, such as for unknown services or where one server can
support more than one service (for example both FTP and web service), it might
be better to specify a range of port numbers.
In addition to the servers for specified services, NAT supports a default server. A
service request that does not have a server explicitly designated for it is forwarded
to the default server. If the default is not defined, the service request is simply
discarded.
For example, let's say you want to assign ports 21-25 to one FTP, Telnet and SMTP
server (A in the example), port 80 to another (B in the example) and assign a
default server IP address of 192.168.1.35 to a third (C in the example). You
assign the LAN IP addresses and the ISP assigns the WAN IP address. The NAT
network appears as a single host on the Internet.
Figure 33 Multiple Servers Behind NAT Example
MAX208M2W Series User s Guide
91
Page 92
Chapter 7Network Setting
Trigger Ports
Some services use a dedicated range of ports on the client side and a dedicated
range of ports on the server side. With regular port forwarding you set a
forwarding port in NAT to forward a service (coming in from the server on the
WAN) to the IP address of a computer on the client side (LAN). The problem is
that port forwarding only forwards a service to a single LAN IP address. In order to
use the same service on a different LAN computer, you have to manually replace
the LAN computer's IP address in the forwarding port with another LAN
computer's IP address,
Trigger port forwarding solves this problem by allowing computers on the LAN to
dynamically take turns using the service. The MAX208M2W Series records the IP
address of a LAN computer that sends traffic to the WAN to request a service with
a specific port number and protocol (a "trigger" port). When the MAX208M2W
Series's WAN port receives a response with a specific port number and protocol
("incoming" port), the MAX208M2W Series forwards the traffic to the LAN IP
address of the computer that sent the request. After that computer s connection
for that service closes, another computer on the LAN can use the service in the
same manner. This way you do not need to configure a new IP address each time
you want a different LAN computer to use the application.
ALG
Some applications, such as SIP, cannot operate through NAT (are NAT un-friendly)
because they embed IP addresses and port numbers in their packets data
payload. Some NAT routers may include a SIP Application Layer Gateway (ALG).
An Application Layer Gateway (ALG) manages a specific protocol (such as SIP,
H.323 or FTP) at the application layer.
A SIP ALG allows SIP calls to pass through NAT by examining and translating IP
addresses embedded in the data stream.
UPnP
Universal Plug and Play (UPnP) is a distributed, open networking standard that
uses TCP/IP for simple peer-to-peer network connectivity between devices. A
UPnP device can dynamically join a network, obtain an IP address, convey its
capabilities and learn about other devices on the network. In turn, a device can
leave a network smoothly and automatically when it is no longer in use.
How do I know if I'm using UPnP?
UPnP hardware is identified as an icon in the Network Connections folder
(Windows XP). Each UPnP compatible device installed on your network will appear
as a separate icon. Selecting the icon of a UPnP device will allow you to access the
information and properties of that device.
92
MAX208M2W Series User s Guide
Page 93
Chapter 7Network Setting
NAT Traversal
UPnP NAT traversal automates the process of allowing an application to operate
through NAT. UPnP network devices can automatically configure network
addressing, announce their presence in the network to other UPnP devices and
enable exchange of simple product and service descriptions. NAT traversal allows
the following:
! Dynamic port mapping
! Learning public IP addresses
! Assigning lease times to mappings
Windows Messenger is an example of an application that supports NAT traversal
and UPnP.
Cautions with UPnP
The automated nature of NAT traversal applications in establishing their own
services and opening firewall ports may present network security issues. Network
information and configuration may also be obtained and modified by users in some
network environments.
All UPnP-enabled devices may communicate freely with each other without
additional configuration. Disable UPnP if this is not your intention.
UPnP and ZyXEL
ZyXEL has received UPnP certification from the official UPnP Forum (http://
www.upnp.org). ZyXEL's UPnP implementation supports IGD 1.0 (Internet
Gateway Device).
The MAX208M2W Series only sends UPnP multicasts to the LAN.
Content Filter
Internet content filtering allows you to create and enforce Internet access policies
tailored to their needs. Content filtering is the ability to block certain specific URL
keywords.
MAX208M2W Series User s Guide
93
Page 94
Chapter 7Network Setting
7.2 WAN
Use these settings to configure the WAN connection between the WiMAX Device
and the service provider.
Click Network Setting > WAN to open this screen as shown next.
Figure 34 WAN Screen
94
MAX208M2W Series User s Guide
Page 95
Chapter 7Network Setting
This screen contains the following fields:
Table 22 WAN
LABEL DESCRIPTION
Operation
Mode
WAN ProtocolSelect the protocol the MAX208M2W Series uses to connect to
Bridging LAN
ARP
Get IP MethodSelect how the MAX208M2W Series receives its IP address.
Select the MAX208M2W Series s operational mode.
! Bridge - This puts the MAX208M2W Series in bridge mode,
acting as a transparent middle man between devices on the
LAN and the devices on the WAN.
! NAT - This allows the MAX208M2W Series to tag frames for
NAT, allowing devices on the LAN to use their own internal IP
addresses while communicating with devices on the WAN.
the WAN.
The options are:
! Ethernet - Select this if you have a persistent connection to the
network.
! PPPoE - Select this if must log into the network before initiating a
persistent connection.
! GRE Tunnel - Select this if you connect to the network using Point-
to-Point Protocol to create VPNs.
! EtherIP - Select this if you need to tunnel Ethernet and IEEE 802.3
MAC frames across an IP Internet.
This option enables or disables allow ARP requests to cross the
MAX208M2W Series.
! User - Select this to manually enter the IP address the
MAX208M2W Series uses.
! From ISP - Select to automatically get the IP address the
MAX208M2W Series uses from the ISP.
WAN IP
Request
Enter the number of seconds the MAX208M2W Series waits for
an IP from the ISP before it times out.
Timeout
WAN IP
Address
WAN IP
Subnet Mask
Gateway IP
Address
If the MAX208M2W Series gets its IP from the user, enter the IP
address it is to use.
If the MAX208M2W Series gets its IP from the ISP, enter the IP
address it is to use.
If the MAX208M2W Series gets its gateway IP address from the
user, enter the IP address it is to use.
MTUEnter the Maximum Transmission Unit (MTU) for the
MAX208M2W Series. This is the largest protocol unit that the
MAX208M2W Series allows to pass through it.
MAX208M2W Series User s Guide
95
Page 96
Chapter 7Network Setting
Table 22 WAN (continued)
LABEL DESCRIPTION
Clone MAC
Address
First~Third
DNS Server
7.3 PPPoE
Enter a MAC address here for registering bridged devices on the
network if their current MAC addresses are causing problems.
For example, this can happen when a desktop computer swaps
network interface cards; the original NIC may have used its MAC
address to register itself on the network and now the new NIC is
unrecognized. Using a MAC address that you know is valid, i.e. a
"clone#, allows that device to stay registered.
Select how the MAX208M2W Series acquires its DNS server
address.
! From ISP - Select this to have the MAX208M2W Series
acquire its DNS server address from the ISP.
! User Define - Select this to manually enter the DNS server
used by the MAX208M2W Series.
Use these settings to configure the PPPoE connection between the WiMAX Device
and the service provider.
Click Network Setting > WAN > PPPoE.
Figure 35 PPPoE Screen
96
MAX208M2W Series User s Guide
Page 97
Chapter 7Network Setting
This screen contains the following fields:
Table 23 PPPoE
LABEL DESCRIPTION
User NameEnter the username for PPPoE login into the WAN network.
PasswordEnter the password for PPPoE login into the WAN network.
Retype
Password
Auth ProtocolSelect a PPPoE authentication protocol. The MAX208M2W Series
MPPE
Encryption
MPPE StatefulUse this option to allow or disallow the MAX208M2W Series to use the
Idle TimeoutEnter the number of second the MAX208M2W Series waits during
AC NameEnter the access concentrator name for the PPPoE interface if your ISP
DNS OverwriteUse this option to allow or disallow the MAX208M2W Series to overwrite
Connection
Trigger
Connection
Timeout
PPPoE ConnectClick this to connect to the WAN using PPPoE.
PPPoE
Disconnect
Retype the password to confirm it.
supports the following:
! CHAP - The Challenge Handshake Authentication Protocol (CHAP)
uses PPP to authenticate remote devices using a three-way
handshake and shared secret verification.
! PAP - Password Authentication Protocol uses unencrypted plaintext
to send a passwords for authentication over the network. It s
probably not a good idea to rely on this for security.
! MS-CHAP v1/2 -This is Microsoft s variant of Challenge Handshake
Authentication Protocol (CHAP). It allows for mutual authentication
between devices.
Use this option to enable or disable authentication through Microsoft
Point-To-Point Encryption (MPPE) protocol.through Microsoft Point-ToPoint Encryption (MPPE) protocol.
Microsoft Point-To-Point Encryption (MPPE) protocol for stateful peer
negotiation.
authentication before timing out.
uses an AC PPPoE service.
DNS static DNS entries on client devices.
Set whether the MAX208M2W Series is persistently connected to the
WAN (AlwaysOn) or you must click the PPPoE Connect button each
time you want to get on the WAN (Manual).
Enter in seconds the duration the MAX208M2W Series waits for idle
activity before disconnecting from the WAN.
Click this to disconnect from the WAN.
MAX208M2W Series User s Guide
97
Page 98
Chapter 7Network Setting
7.4 GRE
Use these settings to configure the peer setting of the Generic Routing
Encapsulation (GRE) tunnel between the WiMAX Device and another GRE peer.
Click Network Setting > WAN > GRE to open this screen as shown next.
Figure 36 GRE Screen
This screen contains the following fields:
Table 24 GRE
LABEL DESCRIPTION
Peer IP AddressEnter the IP address of the GRE peer.
7.5 EtherIP
Use these settings to configure the peer setting of the EtherIP tunnel between the
WiMAX Device and another EtherIP peer.
Click Network Setting > WAN > EtherIP to open this screen as shown next.
Figure 37 EtherIP Screen
This screen contains the following fields:
Table 25 EtherIP
LABEL DESCRIPTION
Peer IP AddressEnter the IP address of the EtherIP peer.
98
MAX208M2W Series User s Guide
Page 99
7.6 IP
Chapter 7Network Setting
Use these settings to configure the LAN connection between the WiMAX Device
and your local network.
Click Network Setting > LAN > IP to open this screen as shown next.
Figure 38 IP Screen
This screen contains the following fields:
Table 26 IP
LABEL DESCRIPTION
IP addressEnter the IP address of the LAN interface for the MAX208M2W Series.
IP Subnet MaskEnter the IP subnet maks of the LAN interface for the MAX208M2W
Series.
MAX208M2W Series User s Guide
99
Page 100
Chapter 7Network Setting
7.7 DHCP
Use these settings to configure whether the WiMAX Device functions as a DHCP
server for your local network, or a DHCP relay between the local network and the
service provider. You can also disable the DHCP functions.
Click Network Setting > LAN > DHCP to open this screen as shown next.
Figure 39 DHCP Screen
100
This screen contains the following fields:
Table 27 DHCP
LABEL DESCRIPTION
DHCP Server
DHCP ModeSelect this if you want the MAX208M2W Series to be the DHCP server
on the LAN. As a DHCP server, the MAX208M2W Series assigns IP
addresses to DHCP clients on the LAN and provides the subnet mask
and DNS server information.
! None - This disables DHCP mode for the MAX208M2W Series.
! Server - This sets the MAX208M2W Series as a DHCP server for the
LAN.
! Relay - This sets the MAX208M2W Series as a DHCP relay for the
LAN, allowing it to pass-through IP addresses assigned to LAN
devices from the ISP servers.
MAX208M2W Series User s Guide
Loading...