Page 1 MAX-206M1R Series WiMAX MIMO Indoor Simple CPE Default Login Details IP Address: http://192.168.1.1 User Name: admin Password: 1234 Firmware Version 3.70 www.zyxel.com Edition 2, 07/2009 www.zyxel.com Copyright © 2009 ZyXEL Communications Corporation...
Page 3: About This User's Guide
About This User's Guide About This User's Guide The following devices are covered in this book: MODEL FEATURES MAX-206M1R 1 VoIP Port 1 LAN Port MAX-216M1R MAX-236M1R MAX-216M1R plus 2 External Antennas 1 VoIP Port 1 LAN Port MAX-216MR 1 LAN Port All graphics and Web Configurator screens shown in this book are based on the MAX-206M1R unless otherwise noted.
Page 4 Help us help you. Send all User’s Guide-related comments, questions or suggestions for improvement to the following address, or use e-mail instead. Thank you! The Technical Writing Team, ZyXEL Communications Corp., 6 Innovation Road II, Science-Based Industrial Park, Hsinchu, 300, Taiwan.
Page 5: Document Conventions
Document Conventions Document Conventions Warnings and Notes These are how warnings and notes are shown in this User’s Guide. Warnings tell you about things that could harm you or your WiMAX Modem. Note: Notes tell you other important information (for example, other things you may need to configure or helpful tips) or recommendations.
Page 6: Table 1 Common Icons
Document Conventions Icons Used in Figures Figures in this User’s Guide may use the following generic icons. The WiMAX Modem icon is not an exact representation of your WiMAX Modem.\ Table 1 Common Icons WiMAX Access Point Computer Wireless Signal Notebook Server WiMAX Base Station...
Page 7: Safety Warnings
Safety Warnings Safety Warnings For your safety, be sure to read and follow all warning notices and instructions. • Do NOT use this product near water, for example, in a wet basement or near a swimming pool. • Do NOT expose your device to dampness, dust or corrosive liquids. •...
Page 8 Safety Warnings • Make sure that the cable system is grounded so as to provide some protection against voltage surges. Your product is marked with this symbol, which is known as the WEEE mark. WEEE stands for Waste Electronics and Electrical Equipment. It means that used electrical and electronic products should not be mixed with general waste.
Page 9: Table Of Contents
Contents Overview Contents Overview Introduction and Wizards ...................... 29 Getting Started ........................... 31 Introducing the Web Configurator ....................37 Internet Connection Wizard ....................... 45 VoIP Connection Wizard ......................51 Basic Screens ........................55 The Setup Screens ........................57 Advanced Screens ......................... 63 The LAN Configuration Screens ....................
Page 10 Contents Overview User’s Guide...
Page 11: Table Of Contents
Table of Contents Table of Contents About This User's Guide ......................3 Document Conventions......................5 Safety Warnings........................7 Contents Overview ........................9 Table of Contents........................11 List of Figures ......................... 19 List of Tables........................... 25 Part I: Introduction and Wizards............29 Chapter 1 Getting Started ........................
Page 12 Table of Contents 3.1.5 Setup Complete ......................50 Chapter 4 VoIP Connection Wizard......................51 4.1 Overview ..........................51 4.2 Welcome to the ZyXEL Setup Wizard ................. 51 4.2.1 First Voice Account Settings ..................52 4.2.2 Setup Complete ......................54 Part II: Basic Screens ................55 Chapter 5 The Setup Screens........................
Page 13 Table of Contents 6.6.5 RIP Setup ........................74 6.6.6 Multicast ........................75 Chapter 7 The WAN Configuration Screens................... 77 7.1 Overview ..........................77 7.1.1 What You Can Do in This Chapter ................77 7.1.2 What You Need to Know .................... 77 7.2 Internet Connection ......................
Page 14 Table of Contents Part IV: Voice Screens ................. 109 Chapter 10 The Service Configuration Screens ..................111 10.1 Overview ...........................111 10.1.1 What You Can Do in This Chapter ................111 10.1.2 What You Need to Know ..................111 10.1.3 Before you Begin .....................113 10.2 SIP Settings ........................113 10.2.1 Advanced SIP Settings ...................115 10.3 QoS ..........................
Page 15 Table of Contents Part V: Tools & Status Screens............145 Chapter 13 The Certificates Screens ...................... 147 13.1 Overview .......................... 147 13.1.1 What You Can Do in This Chapter ................. 147 13.1.2 What You Need to Know ..................147 13.2 My Certificates ......................... 148 13.2.1 My Certificates Create ....................
Page 16 Table of Contents 16.1.1 What You Can Do in This Chapter ................. 183 16.1.2 What You Need to Know ..................184 16.2 WWW ..........................185 16.3 Telnet ..........................186 16.4 FTP ..........................186 16.5 SNMP ..........................187 16.5.1 SNMP Traps ......................188 16.5.2 SNMP Options .......................
Page 17 Table of Contents 20.1 Power, Hardware Connections, and LEDs ..............229 20.2 WiMAX Modem Access and Login .................. 230 20.3 Internet Access ........................ 232 20.4 Phone Calls and VoIP ...................... 234 20.5 Reset the WiMAX Modem to Its Factory Defaults ............235 20.5.1 Pop-up Windows, JavaScripts and Java Permissions ...........
Page 18 Table of Contents User’s Guide...
Page 19: List Of Figures
List of Figures List of Figures Figure 1 Mobile Station and Base Station ....................32 Figure 2 WiMAX Modem’s VoIP Features - Peer-to-Peer Calls ............. 33 Figure 3 WiMAX Modem’s VoIP Features - Calls via VoIP Service Provider ......... 33 Figure 4 The WiMAX Modem’s LEDs .....................
Page 20 List of Figures Figure 39 ADVANCED > NAT Configuration > ALG ................97 Figure 40 ADVANCED > System Configuration > General ..............101 Figure 41 ADVANCED > System Configuration > Dynamic DNS ............103 Figure 42 ADVANCED > System Configuration > Firmware ..............104 Figure 43 ADVANCED >...
Page 21 List of Figures Figure 82 TOOLS > Remote Management > Security ................. 191 Figure 83 TR-069 Example ........................192 Figure 84 TOOLS > Remote Management > TR069 ................193 Figure 85 QoS > General ........................195 Figure 86 QoS > Class Setup ....................... 196 Figure 87 QoS >...
Page 22 List of Figures Figure 125 Ubuntu 8: Network Tools ....................281 Figure 126 openSUSE 10.3: K Menu > Computer Menu ..............282 Figure 127 openSUSE 10.3: K Menu > Computer Menu ..............283 Figure 128 openSUSE 10.3: YaST Control Center ................283 Figure 129 openSUSE 10.3: Network Settings ..................
Page 23 List of Figures Figure 168 Internet Explorer 7: Root Certificate Store ................320 Figure 169 Firefox 2: Website Certified by an Unknown Authority ............322 Figure 170 Firefox 2: Page Info ......................323 Figure 171 Firefox 2: Tools Menu ......................324 Figure 172 Firefox 2: Options .......................
Page 24 List of Figures User’s Guide...
Page 25: List Of Tables
List of Tables List of Tables Table 1 Common Icons ..........................6 Table 2 The WiMAX Modem ........................34 Table 3 Main > Icons ..........................41 Table 4 Main ............................42 Table 5 Internet Connection Wizard > System Information ..............46 Table 6 Internet Connection Wizard >...
Page 26 List of Tables Table 38 Custom Tones Details ......................120 Table 39 VOICE > Service Configuration > QoS ................. 122 Table 40 SIP Call Progression ......................123 Table 41 VOICE > Phone > Analog Phone ..................131 Table 42 VOICE > Phone > Analog Phone > Advanced ..............132 Table 43 VOICE >...
Page 27 List of Tables Table 81 Access Control Logs ......................206 Table 82 TCP Reset Logs ........................207 Table 83 Packet Filter Logs ......................... 207 Table 84 ICMP Logs ..........................208 Table 85 PPP Logs ..........................208 Table 86 UPnP Logs ..........................208 Table 87 Content Filtering Logs ......................
Page 28 List of Tables Table 124 16-bit Network Number Subnet Planning ................307 Table 125 Commonly Used Services ....................345 User’s Guide...
Page 29: Introduction And Wizards
Introduction and Wizards Getting Started (31) Introducing the Web Configurator (37) Internet Connection Wizard (45) VoIP Connection Wizard (51)
Page 31: Getting Started
H A P T E R Getting Started The following devices are covered in this book: MODEL FEATURES MAX-206M1R 1 VoIP Port 1 LAN Port MAX-216M1R MAX-236M1R MAX-216M1R plus 2 External Antennas 1 VoIP Port 1 LAN Port MAX-216MR 1 LAN Port All graphics and Web Configurator screens shown in this book are based on the MAX-206M1R unless otherwise noted.
Page 32: Wimax Internet Access
Chapter 1 Getting Started 1.1.1 WiMAX Internet Access Connect your computer or network to the WiMAX Modem for WiMAX Internet access. See the Quick Start Guide for instructions on hardware connection. In a wireless metropolitan area network (MAN), the WiMAX Modem connects to a WiMAX base station (BS) for Internet access.
Page 33: Make Calls Via Internet Telephony Service Provider
Chapter 1 Getting Started 1.1.2 Make Calls via Internet Telephony Service Provider In a home or small office environment, you can use the WiMAX Modem to make and receive the following types of VoIP telephone calls: • Peer-to-Peer calls - Use the WiMAX Modem to make a call directly to the recipient’s IP address without using a SIP proxy server.
Page 34: Wimax Modem Hardware
Chapter 1 Getting Started 1.2 WiMAX Modem Hardware Follow the instructions in the Quick Start Guide to make hardware connections. 1.2.1 LEDs The following figure shows the LEDs (lights) on the WiMAX Modem. Figure 4 The WiMAX Modem’s LEDs POWER WIMAX LINK STRENGTH INDICATORS VOICE...
Page 35 Chapter 1 Getting Started Table 2 The WiMAX Modem STATE DESCRIPTION The LAN is not connected. Green The WiMAX Modem has a successful Local Area Network (Ethernet) connection and is active during modem activity. Voice No SIP account is registered, or the WiMAX Modem is not receiving power.
Page 36: Good Habits For Managing The Device
Chapter 1 Getting Started 1.3 Good Habits for Managing the Device Do the following things regularly to make the WiMAX Modem more secure and to manage the WiMAX Modem more effectively. • Change the password. Use a password that’s not easy to guess and that consists of different types of characters, such as numbers and letters.
Page 37: Introducing The Web Configurator
H A P T E R Introducing the Web Configurator 2.1 Overview The web configurator is an HTML-based management interface that allows easy device set up and management via any web browser that supports: HTML 4.0, CSS 2.0, and JavaScript 1.5, and higher. The recommended screen resolution for using the web configurator is 1024 by 768 pixels and 16-bit color, or higher.
Page 38 Chapter 2 Introducing the Web Configurator A password screen displays. The default password (“1234”) displays in non- readable characters. If you haven’t changed the password yet, you can just click Login. Click Cancel to revert to the default password in the password field. If you have changed the password, enter your password and click Login.
Page 39 Chapter 2 Introducing the Web Configurator Click Apply in the next screen to create a certificate using your WiMAX Modem’s MAC address that will be specific to this device. This certificate is used for authentication when using a secure HTTPS connection over the Internet. A screen displays to let you choose to go to the Wizard or the Advanced screens.
Page 40: The Reset Button
Chapter 2 Introducing the Web Configurator 2.1.2 The Reset Button If you forget your password or cannot access the web configurator, you will need to use the Reset button to reload the factory-default configuration file. This means that you will lose all configurations that you had previously and the password will be reset to “1234”.
Page 41: The Main Screen
Chapter 2 Introducing the Web Configurator 2.2 The Main Screen When you first log into the web configurator and by-pass the wizard, the Main screen appears. Here you can view a summary of your WiMAX Modem connection status. This is also the default “home” page for the ZyXEL web configurator and it contains conveniently-placed shortcuts to all of the other screens.
Page 42: Table 4 Main
Chapter 2 Introducing the Web Configurator Table 3 Main > Icons (continued) ICON DESCRIPTION VOICE Click to go to the Voice screen, where you can configure your voice service and phone settings. TOOLS Click to go the Tools screen, where you can configure your firewall, QoS, and content filter, among other things.
Page 43 Chapter 2 Introducing the Web Configurator Table 4 Main (continued) LABEL DESCRIPTION Software Version This field indicates the version number of the WiMAX Modem’s firmware. The version number takes the form of: Version(Build),release status (candidate) | Version Release Date. For example: V3.60(BCC.0)c4 | 07/08/2008 indicates that the firmware is 3.60, build BCC.0, candidate4, released on July 08, 2008.
Page 44 Chapter 2 Introducing the Web Configurator User’s Guide...
Page 45: Internet Connection Wizard
H A P T E R Internet Connection Wizard 3.1 Overview This chapter provides information on the ZyXEL Setup Wizard screens. The wizard guides you through several steps where you can configure your Internet and VoIP settings. 3.1.1 Welcome to the ZyXEL Setup Wizard This is the welcome screen for the ZyXEL Setup Wizard.
Page 46: System Information
Chapter 3 Internet Connection Wizard 3.1.2 System Information This Internet Connection Wizard screen allows you to configure your WiMAX Modem’s system information. The settings here correspond to the ADVANCED > System Configuration > General screen (see Section 9.2 on page 101 more).
Page 47: Authentication Settings
Chapter 3 Internet Connection Wizard 3.1.3 Authentication Settings This Internet Connection Wizard screen allows you to configure your Internet access settings. The settings here correspond to the ADVANCED > WAN Configuration > Internet Connection screen (see Section 7.2 on page 80 more information).
Page 48 Chapter 3 Internet Connection Wizard Table 6 Internet Connection Wizard > Authentication Settings Screen (continued) LABEL DESCRIPTION This field displays the Privacy Key Management version number. PKM provides security between the WiMAX Modem and the base station. At the time of writing, the WiMAX Modem supports PKMv2 only.
Page 49: Ip Address
Chapter 3 Internet Connection Wizard 3.1.4 IP Address This Internet Connection Wizard screen allows you to configure your IP address. The settings here correspond to the SETUP > Set IP Address screen (see Section 5.2 on page 58). A fixed IP address is a static IP that your ISP gives you. An automatic (dynamic) IP address is not fixed;...
Page 50: Setup Complete
Chapter 3 Internet Connection Wizard 3.1.5 Setup Complete Click Close to complete and save the Internet Connection Wizard settings. Figure 10 Internet Connection Wizard > Complete Launch your web browser and navigate to www.zyxel.com. If everything was configured properly, the web page should display. You can now surf the Internet! Refer to the rest of this guide for more detailed information on the complete range of WiMAX Modem features available in the more advanced web configurator.
Page 51: Voip Connection Wizard
H A P T E R VoIP Connection Wizard 4.1 Overview This chapter shows you how to use the wizard to set up your voice account(s). The WiMAX Modem has Voice over IP (VoIP) communication capabilities that allow you to use a traditional analog telephone to make Internet calls. You can configure the WiMAX Modem to use up to two SIP based VoIP accounts.
Page 52: First Voice Account Settings
Chapter 4 VoIP Connection Wizard 4.2.1 First Voice Account Settings This VoIP Connection Wizard screen allows you to configure your voice account. The settings here correspond to the VOICE > Service Configuration > SIP Setting screen (see Section 10.2 on page 113 for more information).
Page 53: Figure 13 Voip Connection > Sip Registration Test
Chapter 4 VoIP Connection Wizard Table 8 VoIP Connection > First Voice Account Settings (continued) LABEL DESCRIPTION Check here to set up This screen configures SIP account 1. Select the check box if SIP2 settings. you have a second SIP account that you want to use. You will need to configure the same fields for the second SIP account.
Page 54: Setup Complete
Chapter 4 VoIP Connection Wizard Internet connection was already working, you can click Back and try re-entering your SIP account settings. Figure 14 VoIP Connection > SIP Registration Fail 4.2.2 Setup Complete Click Close to complete and save the VoIP Connection settings. Figure 15 VoIP Connection >...
Page 55: Basic Screens
Basic Screens The Main Screen (41) The Setup Screens (57)
Page 57: The Setup Screens
H A P T E R The Setup Screens 5.1 Overview Use these screens to configure or view LAN, DHCP Client and WAN settings. 5.1.1 What You Can Do in This Chapter • The Set IP Address screen (Section 5.2 on page 58) lets you configure the WiMAX Modem’s IP address and subnet mask.
Page 58: Before You Begin
Chapter 5 The Setup Screens you entered. You do not need to change the computer subnet mask unless you are instructed to do so. Daytime A network protocol used by devices for debugging and time measurement. A computer can use this protocol to set its internal clock but only if it knows in which order the year, month, and day are returned by the server.
Page 59: Dhcp Client
Chapter 5 The Setup Screens The following table describes the labels in this screen. Table 9 SETUP > Set IP Address LABEL DESCRIPTION IP Address Enter the IP address of the WiMAX Modem on the LAN. Note: This field is the IP address you use to access the WiMAX Modem on the LAN.
Page 60: Time Setting
Chapter 5 The Setup Screens Table 10 SETUP > Set IP Address (continued) LABEL DESCRIPTION Reserve This indicates whether the IP address for the connected client device is reserved. When the DHCP server issues IP addresses, reserved IPs are assigned to specific client devices. If the IP address is reserved, the client device identified by its MAC address will always receive this IP address from the DHCP server.
Page 61: Pre-Defined Ntp Time Servers List
Chapter 5 The Setup Screens Table 11 SETUP > Time Setting (continued) LABEL DESCRIPTION Current Date Displays the current time according to the WiMAX Modem. Time and Date Setup Manual Select this if you want to specify the current date and time in the fields below.
Page 62: Resetting The Time
Chapter 5 The Setup Screens the list in order until either it is successful or all the pre-defined NTP time servers have been tried. Table 12 Pre-defined NTP Time Servers ntp1.cs.wisc.edu ntp1.gbg.netnod.se ntp2.cs.wisc.edu tock.usno.navy.mil ntp3.cs.wisc.edu ntp.cs.strath.ac.uk ntp1.sp.se time1.stupi.se tick.stdtime.gov.tw tock.stdtime.gov.tw time.stdtime.gov.tw 5.4.2 Resetting the Time The WiMAX Modem automatically resets the time in the following circumstances:...
Page 63: Advanced Screens
Advanced Screens The LAN Configuration Screens (65) The WAN Configuration Screens (77) The NAT Configuration Screens (89) The System Configuration Screens (99)
Page 65: The Lan Configuration Screens
H A P T E R The LAN Configuration Screens 6.1 Overview Use the ADVANCED > LAN Configuration screens to set up the WiMAX Modem on the LAN. You can configure its IP address and subnet mask, DHCP services, and other subnets. You can also control how the WiMAX Modem sends routing information using RIP.
Page 66: Dhcp Setup
Chapter 6 The LAN Configuration Screens Subnet Masks Subnet masks determine the maximum number of possible hosts on a network. You can also use subnet masks to divide one network into multiple sub-networks. DNS (Domain Name System) is for mapping a domain name to its corresponding IP address and vice versa.
Page 67: Table 13 Advanced > Lan Configuration > Dhcp Setup
Chapter 6 The LAN Configuration Screens The following table describes the labels in this screen. Table 13 ADVANCED > LAN Configuration > DHCP Setup LABEL DESCRIPTION DHCP Setup Enable DHCP Select this if you want the WiMAX Modem to be the DHCP server on the Server LAN.
Page 68: Static Dhcp
Chapter 6 The LAN Configuration Screens 6.3 Static DHCP Click ADVANCED > LAN Configuration > Static DHCP to assign specific IP addresses to specific computers on the LAN. Note: This screen has no effect if the DHCP server is not enabled. You can enable it in ADVANCED >...
Page 69: Ip Static Route
Chapter 6 The LAN Configuration Screens 6.4 IP Static Route Click ADVANCED > LAN Configuration > IP Static Route to look at the static routes configured in the WiMAX Modem. Note: The first static route is the default route and cannot be modified or deleted. Figure 21 Advanced>...
Page 70: Ip Static Route Setup
Chapter 6 The LAN Configuration Screens 6.4.1 IP Static Route Setup Click an Edit icon in ADVANCED > LAN Configuration > IP Static Route to edit a static route in the WiMAX Modem. Figure 22 Advanced> LAN Configuration > IP Static Route Setup The following table describes the labels in this screen.
Page 71: Other Settings
Chapter 6 The LAN Configuration Screens Table 17 Management > Static Route > IP Static Route > Edit (continued) LABEL DESCRIPTION Apply Click to save your changes. Cancel Click to return to the previous screen without saving your changes. 6.5 Other Settings Click ADVANCED >...
Page 72: Technical Reference
Chapter 6 The LAN Configuration Screens Table 18 ADVANCED > LAN Configuration > Other Settings (continued) LABEL DESCRIPTION Multicast You do not have to enable multicasting to use RIP-2M. (See RIP Version.) Select which version of IGMP the WiMAX Modem uses to support multicasting on the LAN.
Page 73: Dhcp Setup
Chapter 6 The LAN Configuration Screens Once you have decided on the network number, pick an IP address that is easy to remember, for instance, 192.168.1.1, for your WiMAX Modem, but make sure that no other device on your network is using that IP address. The subnet mask specifies the network number portion of an IP address.
Page 74: Dns Server Address
Chapter 6 The LAN Configuration Screens 6.6.4 DNS Server Address DNS (Domain Name System) is for mapping a domain name to its corresponding IP address and vice versa. The DNS server is extremely important because without it, you must know the IP address of a machine before you can access it. The DNS server addresses that you enter in the DHCP setup are passed to the client machines along with the assigned IP address and subnet mask.
Page 75: Multicast
Chapter 6 The LAN Configuration Screens • None - the WiMAX Modem will not send any RIP packets and will ignore any RIP packets received. The Version field controls the format and the broadcasting method of the RIP packets that the WiMAX Modem sends (it recognizes both formats when receiving).
Page 76 Chapter 6 The LAN Configuration Screens User’s Guide...
Page 77: The Wan Configuration Screens
H A P T E R The WAN Configuration Screens 7.1 Overview Use the ADVANCED > WAN Configuration screens to set up your WiMAX Modem’s Wide Area Network (WAN) or Internet features. A Wide Area Network (or WAN) links geographically dispersed locations to other networks or the Internet.
Page 78: Figure 24 Wimax: Mobile Station
Chapter 7 The WAN Configuration Screens from one base station to another base station (handover) while subscriber stations use other standards that do not have this capability (IEEE 802.16-2004, for example). The following figure shows an MS-equipped notebook computer MS1 moving from base station BS1’s coverage area and connecting to BS2. Figure 24 WiMax: Mobile Station WiMAX technology uses radio signals (around 2 to 10 GHz) to connect subscriber stations and mobile stations to local base stations.
Page 79: Figure 26 Using An Aaa Server
Chapter 7 The WAN Configuration Screens Authentication When authenticating a user, the base station uses a third-party RADIUS or Diameter server known as an AAA (Authentication, Authorization and Accounting) server to authenticate the mobile or subscriber stations. The following figure shows a base station using an AAA server to authenticate mobile station MS, allowing it to access the Internet.
Page 80: Internet Connection
Chapter 7 The WAN Configuration Screens 7.2 Internet Connection Click ADVANCED > WAN Configuration to set up your WiMAX Modem’s Internet settings. Note: Not all WiMAX Modem models have all the fields shown here. Figure 27 ADVANCED > WAN Configuration > Internet Connection The following table describes the labels in this screen.
Page 81 Chapter 7 The WAN Configuration Screens Table 19 ADVANCED > WAN Configuration > Internet Connection > ISP Parameters for Internet Access (continued) LABEL DESCRIPTION This field displays the Privacy Key Management version number. PKM provides security between the WiMAX Modem and the base station.
Page 82: Wimax Configuration
Chapter 7 The WAN Configuration Screens Table 19 ADVANCED > WAN Configuration > Internet Connection > ISP Parameters for Internet Access (continued) LABEL DESCRIPTION Select this if you have a dynamic IP address. A dynamic IP address automatically is not fixed; the ISP assigns you a different one each time you from ISP connect to the Internet.
Page 83: Figure 28 Advanced > Wan Configuration >Wimax Configuration
Chapter 7 The WAN Configuration Screens Radio frequency is measured in Hertz (Hz). Table 20 Radio Frequency Conversion 1 kHz = 1000 Hz 1 MHz = 1000 kHz (1000000 Hz) 1 GHz = 1000 MHz (1000000 kHz) Figure 28 ADVANCED > WAN Configuration >WiMAX Configuration The following table describes the labels in this screen.
Page 84: Frequency Ranges
Chapter 7 The WAN Configuration Screens 7.3.1 Frequency Ranges The following figure shows the WiMAX Modem searching a range of frequencies to find a connection to a base station. Figure 29 Frequency Ranges In this figure, A is the WiMAX frequency range. “WiMAX frequency range” refers to the entire range of frequencies the WiMAX Modem is capable of using to transmit and receive (see the Product Specifications appendix for details).
Page 85: Using The Wimax Frequency Screen
Chapter 7 The WAN Configuration Screens Note: It may take several minutes for the WiMAX Modem to find a connection. • The WiMAX Modem searches the DL Frequency settings in ascending numerical order, from [1] to [9]. Note: The Bandwidth field is not user-configurable; when the WiMAX Modem finds a WiMAX connection, its frequency is displayed in this field.
Page 86: Antenna Selection
Chapter 7 The WAN Configuration Screens In the DL Frequency [4] field, enter 2625000. Leave the rest of the DL Frequency fields at zero. The screen appears as follows. Figure 30 Completing the WiMAX Frequency Screen Click Apply. The WiMAX Modem stores your settings. When the WiMAX Modem searches for available frequencies, it scans all frequencies from DL Frequency [1] to DL Frequency [4].
Page 87: Advanced
Chapter 7 The WAN Configuration Screens Table 23 ADVANCED > WAN Configuration > Advanced (continued) LABEL DESCRIPTION Apply Click to save your changes. Reset Click to restore your previously saved settings. 7.5 Advanced Click ADVANCED > WAN Configuration > Advanced to configure your DNS server, RIP, Multicast and Windows Networking settings.
Page 88: Table 24 Advanced > Wan Configuration > Advanced
Chapter 7 The WAN Configuration Screens The following table describes the labels in this screen. Table 24 ADVANCED > WAN Configuration > Advanced LABEL DESCRIPTION DNS Servers First, Second and Select Obtained from ISP if your ISP dynamically assigns DNS Third DNS Server server information (and the WiMAX Modem's WAN IP address).
Page 89: The Nat Configuration Screens
H A P T E R The NAT Configuration Screens 8.1 Overview Use these screens to configure port forwarding and trigger ports for the WiMAX Modem. You can also enable and disable SIP, FTP, and H.323 ALG. Network Address Translation (NAT) maps a host’s IP address within one network to a different IP address in another network.
Page 90: Port Forwarding
Chapter 8 The NAT Configuration Screens The following table describes the labels in this screen. Table 25 ADVANCED > NAT Configuration > General LABEL DESCRIPTION Enable Network Select this if you want to use port forwarding, trigger ports, or any Address Translation of the ALG.
Page 91: Port Forwarding Options
Chapter 8 The NAT Configuration Screens For example, let's say you want to assign ports 21-25 to one FTP, Telnet and SMTP server (A in the example), port 80 to another (B in the example) and assign a default server IP address of 192.168.1.35 to a third (C in the example). You assign the LAN IP addresses and the ISP assigns the WAN IP address.
Page 92: Table 26 Advanced> Vpn Transport > Customer Interface
Chapter 8 The NAT Configuration Screens The following table describes the icons in this screen. Table 26 Advanced> VPN Transport > Customer Interface ICON DESCRIPTION Edit Click to edit this item. Delete Click to delete this item. The following table describes the labels in this screen. Table 27 ADVANCED >...
Page 93: Port Forwarding Rule Setup
Chapter 8 The NAT Configuration Screens 8.3.2 Port Forwarding Rule Setup Click a port forwarding rule’s Edit icon in the ADVANCED > NAT Configuration > Port Forwarding screen to activate, deactivate, or edit it. Figure 36 ADVANCED > NAT Configuration > Port Forwarding > Rule Setup The following table describes the labels in this screen.
Page 94: Trigger Port
Chapter 8 The NAT Configuration Screens 8.4 Trigger Port Some services use a dedicated range of ports on the client side and a dedicated range of ports on the server side. With regular port forwarding you set a forwarding port in NAT to forward a service (coming in from the server on the WAN) to the IP address of a computer on the client side (LAN).
Page 95: Trigger Port Forwarding Example
Chapter 8 The NAT Configuration Screens Table 29 ADVANCED > NAT Configuration > Trigger Port (continued) LABEL DESCRIPTION Start Port Enter the incoming port number or range of port numbers you want to End Port forward to the IP address the WiMAX Modem records. To forward one port number, enter the port number in the Start Port and End Port fields.
Page 96: Alg
Chapter 8 The NAT Configuration Screens Jane requests a file from the Real Audio server (port 7070). Port 7070 is a “trigger” port and causes the WiMAX Modem to record Jane’s computer IP address. The WiMAX Modem associates Jane's computer IP address with the "incoming"...
Page 97: Figure 39 Advanced > Nat Configuration > Alg
Chapter 8 The NAT Configuration Screens Click ADVANCED > NAT Configuration > ALG to enable and disable SIP (VoIP), FTP (file transfer), and H.323 (audio-visual) ALG in the WiMAX Modem. Figure 39 ADVANCED > NAT Configuration > ALG The following table describes the labels in this screen. Table 30 ADVANCED >...
Page 98 Chapter 8 The NAT Configuration Screens User’s Guide...
Page 99: The System Configuration Screens
H A P T E R The System Configuration Screens 9.1 Overview Click ADVANCED > System Configuration to set up general system settings, change the system mode, change the password, configure the DDNS server settings, and set the current date and time. 9.1.1 What You Can Do in This Chapter •...
Page 100: The System Configuration Screens
Chapter 9 The System Configuration Screens • In Windows XP: Click Start > My Computer > View system information and then click the Computer Name tab. Note the entry in the Full computer name field and enter it as the WiMAX Modem System Name. Domain Name The Domain Name entry is what is propagated to the DHCP clients on the LAN.
Page 101: General
Chapter 9 The System Configuration Screens 9.2 General Click ADVANCED > System Configuration > General to change the WiMAX Modem’s mode, set up its system name, domain name, idle timeout, and administrator password. Figure 40 ADVANCED > System Configuration > General The following table describes the labels in this screen.
Page 102: Dynamic Dns
Chapter 9 The System Configuration Screens Table 31 ADVANCED > System Configuration > General (continued) LABEL DESCRIPTION Retype to Enter the new password again. Confirm Apply Click to save your changes. Reset Click to restore your previously saved settings. 9.3 Dynamic DNS Dynamic DNS allows you to update your current dynamic IP address with one or many dynamic DNS services so that anyone can contact you (in NetMeeting, CU- SeeMe, etc.).
Page 103: Figure 41 Advanced > System Configuration > Dynamic Dns
Chapter 9 The System Configuration Screens Click ADVANCED > System Configuration > Dynamic DNS to set up the WiMAX Modem as a dynamic DNS client. Figure 41 ADVANCED > System Configuration > Dynamic DNS The following table describes the labels in this screen. Table 32 ADVANCED >...
Page 104: Firmware
Chapter 9 The System Configuration Screens Table 32 ADVANCED > System Configuration > Dynamic DNS (continued) LABEL DESCRIPTION Enable offline This field is available when CustomDNS is selected in the DDNS Type option field. Select this if your Dynamic DNS service provider redirects traffic to a URL that you can specify while you are off line.
Page 105: The Firmware Upload Process
Chapter 9 The System Configuration Screens The following table describes the labels in this screen. Table 33 ADVANCED > System Configuration > Firmware LABEL DESCRIPTION File Path Enter the location of the *.bin file you want to upload, or click Browse...
Page 106: Configuration
Chapter 9 The System Configuration Screens 9.5 Configuration Click ADVANCED > System Configuration > Configuration to back up or restore the configuration of the WiMAX Modem. You can also use this screen to reset the WiMAX Modem to the factory default settings. Figure 43 ADVANCED >...
Page 107: The Restore Configuration Process
Chapter 9 The System Configuration Screens 9.5.1 The Restore Configuration Process When the WiMAX Modem restores a configuration file, the device automatically restarts. This causes a temporary network disconnect. Note: Do not turn off the device while configuration file upload is in progress. If the WiMAX Modem’s IP address is different in the configuration file you selected, you may need to change the IP address of your computer to be in the same subnet as that of the default management IP address (192.168.5.1).
Page 108: The Restart Process
Chapter 9 The System Configuration Screens 9.6.1 The Restart Process When you click Restart, the the process usually takes about two minutes. Once the restart is complete you can log in again. User’s Guide...
Page 109: Voice Screens
Voice Screens The Service Configuration Screens (111) The Phone Screens (129) The Phone Book Screens (139)
Page 111: The Service Configuration Screens
H A P T E R The Service Configuration Screens 10.1 Overview The VOICE > Service Configuration screens allow you to set up your voice accounts and configure your QoS settings. VoIP (Voice over IP) is the sending of voice signals over the Internet Protocol. This allows you to make phone calls and send faxes over the Internet at a fraction of the cost of using the traditional circuit-switched telephone network.
Page 112: The Service Configuration Screens
Chapter 10 The Service Configuration Screens multimedia sessions over the Internet. SIP signaling is separate from the media for which it handles sessions. The media that is exchanged during the session can use a different path from that of the signaling. SIP handles telephone calls and can interface with traditional circuit-switched telephone networks.
Page 113: Before You Begin
Chapter 10 The Service Configuration Screens 10.1.3 Before you Begin • Ensure that you have all of your voice account information on hand. If not, contact your voice account service provider to find out which settings in this chapter you should configure in order to use your telephone with the WiMAX Modem.
Page 114: Table 36 Voice > Service Configuration > Sip Setting
Chapter 10 The Service Configuration Screens The following table describes the labels in this screen. Table 36 VOICE > Service Configuration > SIP Setting LABEL DESCRIPTION SIP Account Select the SIP account you want to see in this screen. If you change this field, the screen automatically refreshes.
Page 115: Advanced Sip Settings
Chapter 10 The Service Configuration Screens 10.2.1 Advanced SIP Settings This section describes the features of the Advanced SIP settings screen. 10.2.1.1 STUN STUN (Simple Traversal of User Datagram Protocol (UDP) through Network Address Translators) allows the WiMAX Modem to find the presence and types of NAT routers and/or firewalls between it and the public Internet.
Page 116 Chapter 10 The Service Configuration Screens • G.711 is a Pulse Code Modulation (PCM) waveform codec. PCM measures analog signal amplitudes at regular time intervals (sampling) and converts them into digital bits (quantization). Quantization “reads” the analog signal and then “writes”...
Page 117: Figure 47 Voice > Service Configuration > Sip Settings > Advanced
Chapter 10 The Service Configuration Screens 10.2.1.5 Advanced SIP Settings Options Click Advanced in VOICE > Service Configuration > SIP Settings to set up and maintain advanced settings for each SIP account. Figure 47 VOICE > Service Configuration > SIP Settings > Advanced The following table describes the labels in this screen.
Page 118 Chapter 10 The Service Configuration Screens Table 37 VOICE > Service Configuration > SIP Settings > Advanced (continued) LABEL DESCRIPTION Expiration Enter the number of seconds your SIP account is registered with the Duration SIP register server before it is deleted. The WiMAX Modem automatically tries to re-register your SIP account when one-half of this time has passed.
Page 119 Chapter 10 The Service Configuration Screens Table 37 VOICE > Service Configuration > SIP Settings > Advanced (continued) LABEL DESCRIPTION STUN Active Select this if all of the following conditions are satisfied. • There is a NAT router between the WiMAX Modem and the SIP server.
Page 120: Table 38 Custom Tones Details
Chapter 10 The Service Configuration Screens Table 37 VOICE > Service Configuration > SIP Settings > Advanced (continued) LABEL DESCRIPTION Expiration Time Keep the default value, unless your VoIP service provider tells you to change it. Enter the number of seconds the SIP server should provide the message waiting service each time the WiMAX Modem subscribes to the service.
Page 121 Chapter 10 The Service Configuration Screens Table 38 Custom Tones Details LABEL DESCRIPTION Maximum Time per 20 seconds Individual Tone Total Number of Tones Recordable You can record up to eight different custom tones but the total time must be 128 seconds or less. Use the following steps if you would like to create new tones or change your tones: Pick up the phone and press **** on your phone’s keypad and wait for the...
Page 122: Qos
Chapter 10 The Service Configuration Screens 10.3 QoS Network traffic can be classified by setting the ToS (Type Of Service) values at the data source (for example, at the WiMAX Modem) so a server can decide the best method of delivery, that is the least cost, fastest route and so on. Virtual Local Area Network (VLAN) allows a physical network to be partitioned into multiple logical networks.
Page 123: Technical Reference
Chapter 10 The Service Configuration Screens Table 39 VOICE > Service Configuration > QoS LABEL DESCRIPTION Voice VLAN ID Select this if the WiMAX Modem has to be a member of a VLAN to communicate with the SIP server. Ask your network administrator, if you are not sure.
Page 124: Sip Client Server
Chapter 10 The Service Configuration Screens After talking, A hangs up and sends a BYE request. B replies with an OK response confirming receipt of the BYE request and the call is terminated. 10.4.2 SIP Client Server SIP is a client-server protocol. A SIP client is an application program or device that sends SIP requests.
Page 125: Sip Redirect Server
Chapter 10 The Service Configuration Screens The SIP proxy server forwards the call invitation to C. Figure 50 SIP Proxy Server 10.4.5 SIP Redirect Server A SIP redirect server accepts SIP requests, translates the destination address to an IP address and sends the translated IP address back to the device that sent the request.
Page 126: Nat And Sip
Chapter 10 The Service Configuration Screens Client device A then sends the call invitation to client device C. Figure 51 SIP Redirect Server 10.4.6 NAT and SIP The WiMAX Modem must register its public IP address with a SIP register server. If there is a NAT router between the WiMAX Modem and the SIP register server, the WiMAX Modem probably has a private IP address.
Page 127: Dscp And Per-Hop Behavior
Chapter 10 The Service Configuration Screens 10.4.8 DSCP and Per-Hop Behavior DiffServ defines a new DS (Differentiated Services) field to replace the Type of Service (TOS) field in the IP header. The DS field contains a 2-bit unused field and a 6-bit DSCP field which can define up to 64 service levels.
Page 128 Chapter 10 The Service Configuration Screens User’s Guide...
Page 129: The Phone Screens
H A P T E R The Phone Screens 11.1 Overview Use the VOICE > Phone screens to configure the volume, echo cancellation, VAD settings and custom tones for the phone port on the WiMAX Modem. You can also select which SIP account to use for making outgoing calls. 11.1.1 What You Can Do in This Chapter •...
Page 130: Analog Phone
Chapter 11 The Phone Screens Supplementary Phone Services Overview Supplementary services such as call hold, call waiting, call transfer, etc. are generally available from your VoIP service provider. The WiMAX Modem supports the following services: • Call Hold • Call Waiting •...
Page 131: Advanced Analog Phone Setup
Chapter 11 The Phone Screens The following table describes the labels in this screen. Table 41 VOICE > Phone > Analog Phone LABEL DESCRIPTION Phone Port Select the phone port you want to see in this screen. If you change this Settings field, the screen automatically refreshes.
Page 132: Common
Chapter 11 The Phone Screens The following table describes the labels in this screen. Table 42 VOICE > Phone > Analog Phone > Advanced LABEL DESCRIPTION Voice Volume Control Speaking Enter the loudness that the WiMAX Modem uses for speech that it sends Volume to the peer device.
Page 133: Region
Chapter 11 The Phone Screens The following table describes the labels in this screen. Table 43 VOICE > Phone > Common LABEL DESCRIPTION Active Select this if you want to use the pound key (#) to tell the WiMAX Immediate Dial Modem to make the phone call immediately, instead of waiting the number of seconds you selected in the Dialing Interval Select in VOICE >...
Page 134: Technical Reference
Chapter 11 The Phone Screens 11.5 Technical Reference The following section contains additional technical information about the WiMAX Modem features described in this chapter. 11.5.1 The Flash Key Flashing means to press the hook for a short period of time (a few hundred milliseconds) before releasing it.
Page 135 Chapter 11 The Phone Screens If you have another call, press the flash key and then “2” to switch back and forth between caller A and B by putting either one on hold. Press the flash key and then “0” to disconnect the call presently on hold and keep the current call on line.
Page 136: Usa Type Supplementary Services
Chapter 11 The Phone Screens Hang up the phone to drop the connection. If you want to separate the activated three-way conference into two individual connections (one is on-line, the other is on hold), press the flash key and press “2”.
Page 137 Chapter 11 The Phone Screens After you hear the ring signal or the second party answers it, hang up the phone. USA Three-Way Conference allows you to make three-way conference calls. To do so: When you are making a call, press the flash key to put the call on hold and get a dial tone.
Page 138 Chapter 11 The Phone Screens User’s Guide...
Page 139: The Phone Book Screens
H A P T E R The Phone Book Screens 12.1 Overview The VOICE > Phone Book screens allow you to configure the WiMAX Modem’s phone book for making VoIP calls. 12.1.1 What You Can Do in This Chapter • The Incoming Call Policy screen (Section 12.2 on page 140) lets you maintain rules for handling incoming calls.
Page 140: Incoming Call Policy
Chapter 12 The Phone Book Screens 12.2 Incoming Call Policy Click VOICE > Phone Book > Incoming Call Policy to maintain rules for handling incoming calls. You can block, redirect, or accept them. Figure 57 VOICE > Phone Book > Incoming Call Policy The following table describes the labels in this screen.
Page 141 Chapter 12 The Phone Book Screens Table 47 VOICE > Phone Book > Incoming Call Policy LABEL DESCRIPTION No Answer Select this if you want the WiMAX Modem to forward incoming calls to Forward to the specified phone number if the call is unanswered. (See No Answer Number Waiting Time.) Specify the phone number in the field on the right.
Page 142: Speed Dial
Chapter 12 The Phone Book Screens 12.3 Speed Dial Click VOICE > Phone Book > Speed Dial to add, edit, or remove speed-dial entries. You must create speed-dial entries if you want to make peer-to-peer calls or call SIP numbers that use letters. You can also create speed-dial entries for frequently-used SIP phone numbers.
Page 143: Table 49 Voice > Phone Book > Speed Dial
Chapter 12 The Phone Book Screens The following table describes the labels in this screen. Table 49 VOICE > Phone Book > Speed Dial LABEL DESCRIPTION Speed Dial Select the speed-dial number you want to use for this phone number. Number Enter the SIP number you want the WiMAX Modem to call when you dial the speed-dial number.
Page 144 Chapter 12 The Phone Book Screens User’s Guide...
Page 145: Tools & Status Screens
Tools & Status Screens The Certificates Screens (147) The Firewall Screens (169) Content Filter (179) The Remote Management Screens (183) QoS (195) The Logs Screens (199) The Status Screen (215)
Page 147: The Certificates Screens
H A P T E R The Certificates Screens 13.1 Overview Use the TOOLS > Certificates screens to manage public key certificates on the WiMAX Modem. The WiMAX Modem can use public key certificates (also sometimes called “digital IDs”) to authenticate users. Certificates are based on public-private key pairs. A certificate contains the certificate owner’s identity and public key.
Page 148: My Certificates
Chapter 13 The Certificates Screens WiMAX Modem to generate certification requests that contain identifying information and public keys and then send the certification requests to a certification authority. 13.2 My Certificates Click TOOLS > Certificates > My Certificates to access this screen. Use this screen to generate and export self-signed certificates or certification requests and import the WiMAX Modem’s CA-signed certificates.
Page 149 Chapter 13 The Certificates Screens Table 51 TOOLS > Certificates > My Certificates (continued) LABEL DESCRIPTION Name This field displays the name used to identify this certificate. It is recommended that you give each certificate a unique name. Type This field displays what kind of certificate this is. REQ represents a certification request and is not yet a valid certificate.
Page 150: My Certificates Create
Chapter 13 The Certificates Screens 13.2.1 My Certificates Create Click TOOLS > Certificates > My Certificates and then the Create icon to open the My Certificates Create screen. Use this screen to have the WiMAX Modem create a self-signed certificate, enroll a certificate with a certification authority or generate a certification request.
Page 151: Table 52 Tools > Certificates > My Certificates > Create
Chapter 13 The Certificates Screens The following table describes the labels in this screen. Table 52 TOOLS > Certificates > My Certificates > Create LABEL DESCRIPTION Certificate Name Type a name to identify this certificate. You can use up to 31 alphanumeric and ;‘~!@#$%^&()_+[]{}’,.=- characters.
Page 152 Chapter 13 The Certificates Screens Table 52 TOOLS > Certificates > My Certificates > Create LABEL DESCRIPTION Create a Select Create a certification request and enroll for a certification certificate immediately online to have the WiMAX Modem request and enroll generate a request for a certificate and apply to a certification for a certificate authority for a certificate.
Page 153 Chapter 13 The Certificates Screens Table 52 TOOLS > Certificates > My Certificates > Create LABEL DESCRIPTION Apply Click to save your changes. Cancel Click to return to the previous screen without saving your changes. If you configured the My Certificate Create screen to have the WiMAX Modem enroll a certificate and the certificate enrollment is not successful, you see a screen with a Return button that takes you back to the My Certificate Create screen.
Page 154: My Certificate Edit
Chapter 13 The Certificates Screens 13.2.2 My Certificate Edit Click TOOLS > Certificates > My Certificates then the Edit icon to access this screen. Use this screen to view in-depth certificate information and change the certificate’s name. Figure 61 TOOLS > Certificates > My Certificates > Edit The following table describes the labels in this screen.
Page 155 Chapter 13 The Certificates Screens Table 53 TOOLS > Certificates > My Certificates > Edit LABEL DESCRIPTION Certification Path This field displays for a certificate, not a certification request. Click the Refresh button to have this read-only text box display the hierarchy of certification authorities that validate the certificate (and the certificate itself).
Page 156 Chapter 13 The Certificates Screens Table 53 TOOLS > Certificates > My Certificates > Edit LABEL DESCRIPTION Key Usage This field displays for what functions the certificate’s key can be used. For example, “DigitalSignature” means that the key can be used to sign certificates and “KeyEncipherment”...
Page 157: My Certificate Import
Chapter 13 The Certificates Screens 13.2.3 My Certificate Import Click TOOLS > Certificates > My Certificates > Import to access this screen. Use this screen to import a certificate that matches a corresponding certification request that was generated by the WiMAX Modem. You must remove any spaces from the certificate’s filename before you can import it.
Page 158: Trusted Cas
Chapter 13 The Certificates Screens 13.3 Trusted CAs Click TOOLS > Certificates > Trusted CAs access this screen. Use this screen to display a summary list of certificates of the certification authorities that you have set the WiMAX Modem to accept as trusted. The WiMAX Modem accepts any valid certificate signed by a certification authority on this list as being trustworthy;...
Page 159 Chapter 13 The Certificates Screens Table 56 TOOLS > Certificates > Trusted CAs (continued) LABEL DESCRIPTION Issuer This field displays identifying information about the certificate’s issuing certification authority, such as a common name, organizational unit or department, organization or company and country. With self-signed certificates, this is the same information as in the Subject field.
Page 160: Trusted Ca Edit
Chapter 13 The Certificates Screens 13.3.1 Trusted CA Edit Click TOOLS > Certificates > Trusted CAs and then click the Edit icon to open the Trusted CAs screen. Use this screen to view in-depth certificate information and change the certificate’s name. Figure 64 TOOLS >...
Page 161 Chapter 13 The Certificates Screens Table 57 TOOLS > Certificates > Trusted CAs > Edit (continued) LABEL DESCRIPTION Certification Path This field displays for a certificate, not a certification request. Click the Refresh button to have this read-only text box display the hierarchy of certification authorities that validate the certificate (and the certificate itself).
Page 162 Chapter 13 The Certificates Screens Table 57 TOOLS > Certificates > Trusted CAs > Edit (continued) LABEL DESCRIPTION Key Usage This field displays for what functions the certificate’s key can be used. For example, “DigitalSignature” means that the key can be used to sign certificates and “KeyEncipherment”...
Page 163: Trusted Ca Import
Chapter 13 The Certificates Screens 13.3.2 Trusted CA Import Click TOOLS > Certificates > Trusted CAs and then click Import to open the Trusted CA Import screen. Follow the instructions in this screen to save a trusted certification authority’s certificate from a computer to the WiMAX Modem. The WiMAX Modem trusts any valid certificate signed by any of the imported trusted CA certificates.
Page 164: Certificate Authorities
Chapter 13 The Certificates Screens 13.4.1 Certificate Authorities When using public-key cryptology for authentication, each host has two keys. One key is public and can be made openly available. The other key is private and must be kept secure. These keys work like a handwritten signature (in fact, certificates are often referred to as “digital signatures”).
Page 165 Chapter 13 The Certificates Screens Certification authorities maintain directory servers with databases of valid and revoked certificates. A directory of certificates that have been revoked before the scheduled expiration is called a CRL (Certificate Revocation List). The WiMAX Modem can check a peer’s certificate against a directory server’s list of revoked certificates.
Page 166: Verifying A Certificate
Chapter 13 The Certificates Screens 13.4.2 Verifying a Certificate Before you import a certificate into the WiMAX Modem, you should verify that you have the correct certificate. This is especially true of trusted certificates since the WiMAX Modem also trusts any valid certificate signed by any of the imported trusted certificates.
Page 167: Figure 67 Certificate Details
Chapter 13 The Certificates Screens Double-click the certificate’s icon to open the Certificate window. Click the Details tab and scroll down to the Thumbprint Algorithm and Thumbprint fields. Figure 67 Certificate Details Use a secure method to verify that the certificate owner has the same information in the Thumbprint Algorithm and Thumbprint fields.
Page 168 Chapter 13 The Certificates Screens User’s Guide...
Page 169: The Firewall Screens
H A P T E R The Firewall Screens 14.1 Overview Use the TOOLS > Firewall screens to manage WiMAX Modem’s firewall security measures. Originally, the term firewall referred to a construction technique designed to prevent the spread of fire from one room to another. The networking term "firewall"...
Page 170: Firewall Setting
Chapter 14 The Firewall Screens the Internet. The WiMAX Modem can be used to prevent theft, destruction and modification of data, as well as log events, which may be important to the security of your network. The WiMAX Modem is installed between the LAN and a WiMAX base station connecting to the Internet.
Page 171: Triangle Route
Chapter 14 The Firewall Screens LAN-to-LAN/WiMAX Modem means the LAN to the WiMAX Modem LAN interface. This is always allowed, as this is how you manage the WiMAX Modem from your local computer. WAN-to-LAN rules are Internet to your local network firewall rules. The default is to block all traffic from the Internet to your local network.
Page 172: Firewall Setting Options
Chapter 14 The Firewall Screens 14.2.3 Firewall Setting Options Click TOOLS > Firewall > Firewall Setting to configure the basic settings for your firewall. Figure 70 TOOLS > Firewall > Firewall Setting The following table describes the labels in this screen. Table 59 TOOLS >...
Page 173: Services
Chapter 14 The Firewall Screens 14.3 Services Click TOOLS > Firewall > Services to enable service blocking, set up the date and time service blocking is effective, and to maintain the list of services you want to block. Figure 71 TOOLS > Firewall > Service Setting The following table describes the labels in this screen.
Page 174: Technical Reference
Chapter 14 The Firewall Screens Table 60 TOOLS > Firewall > Service Setting (continued) LABEL DESCRIPTION Blocked This is a list of services (ports) that are inaccessible to computers on Services your LAN when service blocking is effective. To remove a service from this list, select the service, and click Delete.
Page 175: Guidelines For Enhancing Security With Your Firewall
Chapter 14 The Firewall Screens 14.4.2 Guidelines For Enhancing Security With Your Firewall Change the default password via web configurator. Think about access control before you connect to the network in any way. Limit who can access your router. Don't enable any local service (such as telnet or FTP) that you don't use. Any enabled service could present a potential security risk.
Page 176: Figure 72 "Triangle Route" Problem
Chapter 14 The Firewall Screens As a result, the WiMAX Modem resets the connection, as the connection has not been acknowledged. Figure 72 “Triangle Route” Problem 14.4.3.1 Solving the “Triangle Route” Problem If you have the WiMAX Modem allow triangle route sessions, traffic from the WAN can go directly to a LAN computer without passing through the WiMAX Modem and its firewall protection.
Page 177: Figure 73 Ip Alias
Chapter 14 The Firewall Screens The WiMAX Modem then sends it to the computer on the LAN in Subnet 1. Figure 73 IP Alias User’s Guide...
Page 178 Chapter 14 The Firewall Screens User’s Guide...
Page 179: Content Filter
H A P T E R Content Filter 15.1 Overview Use the TOOLS > Content Filter screens to create and enforce policies that restrict access to the Internet based on content Internet content filtering allows you to create and enforce Internet access policies tailored to their needs.
Page 180: Filter
Chapter 15 Content Filter 15.2 Filter Click TOOLS > Content Filter > Filter to set up a trusted IP address, which web features are restricted, and which keywords are blocked when content filtering is effective. Figure 74 TOOLS > Content Filter > Filter User’s Guide...
Page 181: Table 61 Tools > Content Filter > Filter
Chapter 15 Content Filter The following table describes the labels in this screen. Table 61 TOOLS > Content Filter > Filter LABEL DESCRIPTION Trusted IP Setup Trusted You can allow a specific computer to access all Internet resources Computer IP without the restrictions you set in these screens.
Page 182: Schedule
Chapter 15 Content Filter 15.3 Schedule Click TOOLS > Content Filter > Schedule to schedule content filtering. Figure 75 TOOLS > Content Filter > Schedule The following table describes the labels in this screen. Table 62 TOOLS > Content Filter > Schedule LABEL DESCRIPTION Day to Block...
Page 183: The Remote Management Screens
H A P T E R The Remote Management Screens 16.1 Overview Use the TOOLS > Remote Management screens to control which computers can use which services to access the WiMAX Modem on each interface. Remote management allows you to determine which services/protocols can access which WiMAX Modem interface (if any) from which computers.
Page 184: What You Need To Know
Chapter 16 The Remote Management Screens • The SNMP screen (Section 16.5 on page 187) lets you control SNMP access to your WiMAX Modem. • The DNS screen (Section 16.6 on page 190) lets you control DNS access to your WiMAX Modem.
Page 185: Www
Chapter 16 The Remote Management Screens SNMP Simple Network Management Protocol (SNMP) is a protocol used for exchanging management information between network devices. SNMP is a member of the TCP/IP protocol suite. Your WiMAX Modem supports SNMP agent functionality, which allows a manager station to manage and monitor the WiMAX Modem through the network.
Page 186: Telnet
Chapter 16 The Remote Management Screens 16.3 Telnet Click TOOLS > Remote Management > Telnet to control Telnet access to your WiMAX Modem. Figure 77 TOOLS > Remote Management > Telnet The following table describes the labels in this screen. Table 65 TOOLS >...
Page 187: Snmp
Chapter 16 The Remote Management Screens The following table describes the labels in this screen. Table 66 TOOLS > Remote Management > FTP LABEL DESCRIPTION Server Port Enter the port number this service can use to access the WiMAX Modem. The computer must use the same port number. Server Access Select the interface(s) through which a computer may access the WiMAX Modem using this service.
Page 188: Snmp Traps
Chapter 16 The Remote Management Screens The managed devices contain object variables/managed objects that define each piece of information to be collected about a device. Examples of variables include such as number of packets received, node port status etc. A Management Information Base (MIB) is a collection of managed objects.
Page 189: Snmp Options
Chapter 16 The Remote Management Screens 16.5.2 SNMP Options Click TOOLS > Remote Management > SNMP to access this screen. Use SNMP options to control SNMP access to your WiMAX Modem. Figure 80 TOOLS > Remote Management > SNMP The following table describes the labels in this screen. Table 68 TOOLS >...
Page 190: Dns
Chapter 16 The Remote Management Screens Table 68 TOOLS > Remote Management > SNMP (continued) LABEL DESCRIPTION Secured Client IP A secured client is a “trusted” computer that is allowed to communicate with the WiMAX Modem using this service. Select All to allow any computer to access the WiMAX Modem using this service.
Page 191: Security
Chapter 16 The Remote Management Screens 16.7 Security Click TOOLS > Remote Management > Security to access this screen. Use this screen to control how your WiMAX Modem responds to other types of requests. Figure 82 TOOLS > Remote Management > Security The following table describes the labels in this screen.
Page 192: Tr0-69
Chapter 16 The Remote Management Screens 16.8 TR0-69 TR-069 is an abbreviation of “Technical Reference 069”, a protocol designed to facilitate the remote management of Customer Premise Equipement (CPE), such as the WiMAX Modem. It can be managed over a WAN by means of an Auto Configuration Server (ACS).
Page 193: Figure 84 Tools > Remote Management > Tr069
Chapter 16 The Remote Management Screens Click TOOLS > Remote Management > TR069 to access this screen. Use this screen to open WiMAX Modem’s auto-configuration and dynamic service configuration options. Figure 84 TOOLS > Remote Management > TR069 The following table describes the labels in this screen. Table 71 TOOLS >...
Page 194 Chapter 16 The Remote Management Screens Table 71 TOOLS > Remote Management > TR069 LABEL DESCRIPTION Periodic Inform Select this to allow the WiMAX Modem to periodically connect to the Enable ACS and check for configuration updates. If you do not enable this feature then the WiMAX Modem can only be updated automatically when the ACS initiates contact with it and if you selected the Active checkbox on this screen.
Page 195: Qos
H A P T E R 17.1 Overview Quality of Service (QoS) refers to both a network’s ability to deliver data with minimum delay, and the networking methods used to control the use of bandwidth. Without QoS, all traffic data is equally likely to be dropped when the network is congested.
Page 196: Class Setup
Chapter 17 QoS 17.3 Class Setup Use this screen to add, edit or delete QoS classifiers. A classifier groups traffic into data flows according to specific criteria such as the source address, destination address, source port number, destination port number or incoming interface. For example, you can configure a classifier to select traffic from the same protocol port (such as Telnet) to form a flow.
Page 197: Class Configuration
Chapter 17 QoS 17.3.1 Class Configuration Click the Create New Class button or the edit icon in the Class Setup screen to configure a classifier. Figure 87 QoS > Class Setup > Class Configuration The following table describes the labels in this screen. Table 74 QoS Class Setup LABEL DESCRIPTION...
Page 198 Chapter 17 QoS Table 74 QoS Class Setup (continued) LABEL DESCRIPTION Source / Destination Address Enter the source IP address in dotted decimal notation. Subnet Mask Enter the source subnet mask. Port Range Enter the beginning and ending port numbers. You can use the same number in both fields to indicate a single port, or you can enter 0 in both fields to indicate all ports.
Page 199: The Logs Screens
H A P T E R The Logs Screens 18.1 Overview Use the TOOLS > Logs screens to look at log entries and alerts and to configure the WiMAX Modem’s log and alert settings. For a list of log messages, see Section 18.4 on page 205.
Page 200: Table 75 Syslog Logs
Chapter 18 The Logs Screens can reconstruct and analyze the traffic flowing through the device after collecting the traffic logs. Table 75 Syslog Logs LOG MESSAGE DESCRIPTION This message is sent by the system ("RAS" displays Event Log: <Facility*8 + as the system name if you haven’t configured one) Severity>Mon dd hr:mm:ss when the router generates a syslog.
Page 201: View Logs
Chapter 18 The Logs Screens 18.2 View Logs Click TOOLS > Logs > View Log to access this screen. Use this screen to look at log entries and alerts. Alerts are written in red. Figure 88 TOOLS > Logs > View Logs Click a column header to sort log entries in descending (later-to-earlier) order.
Page 202 Chapter 18 The Logs Screens Table 77 TOOLS > Logs > View Logs (continued) LABEL DESCRIPTION The number of the item in this list. Time This field displays the time the log entry was recorded. Message This field displays the reason for the log entry. See Section 18.4 on page 205.
Page 203: Log Settings
Chapter 18 The Logs Screens 18.3 Log Settings Click TOOLS > Logs > Log Settings to configure where the WiMAX Modem sends logs and alerts, the schedule for sending logs, and which logs and alerts are sent or recorded. Figure 89 TOOLS > Logs > Log Settings User’s Guide...
Page 204: Table 78 Tools > Logs > Log Settings
Chapter 18 The Logs Screens The following table describes the labels in this screen. Table 78 TOOLS > Logs > Log Settings LABEL DESCRIPTION E-mail Log Settings Mail Server Enter the server name or the IP address of the mail server the WiMAX Modem should use to e-mail logs and alerts.
Page 205: Log Message Descriptions
Chapter 18 The Logs Screens Table 78 TOOLS > Logs > Log Settings LABEL DESCRIPTION Apply Click to save your changes. Cancel Click to return to the previous screen without saving your changes. 18.4 Log Message Descriptions The following tables provide descriptions of example log messages. Table 79 System Error Logs LOG MESSAGE DESCRIPTION...
Page 206: Table 81 Access Control Logs
Chapter 18 The Logs Screens Table 80 System Maintenance Logs (continued) LOG MESSAGE DESCRIPTION The device got the time and date from the time Time initialized by Time server. server The device got the time and date from the NTP Time initialized by NTP server.
Page 207: Table 82 Tcp Reset Logs
Chapter 18 The Logs Screens Table 82 TCP Reset Logs LOG MESSAGE DESCRIPTION The router sent a TCP reset packet when a host was Under SYN flood attack, under a SYN flood attack (the TCP incomplete count is per sent TCP RST destination host.) The router sent a TCP reset packet when the number of Exceed TCP MAX...
Page 208: Table 84 Icmp Logs
Chapter 18 The Logs Screens or type and code details, see Table 90 on page 211. Table 84 ICMP Logs LOG MESSAGE DESCRIPTION ICMP access matched the default policy and was Firewall default policy: ICMP blocked or forwarded according to the user's <Packet Direction>, <type:%d>, setting.
Page 209: Table 87 Content Filtering Logs
Chapter 18 The Logs Screens Table 87 Content Filtering Logs LOG MESSAGE DESCRIPTION The content of a requested web page matched a user defined %s: Keyword blocking keyword. The web site is not in a trusted domain, and the router blocks %s: Not in trusted web all traffic except trusted domain sites.
Page 210: Table 89 Remote Management Logs
Chapter 18 The Logs Screens Table 88 Attack Logs (continued) LOG MESSAGE DESCRIPTION The firewall detected an ICMP IP spoofing attack on the ip spoofing - WAN ICMP WAN port. (type:%d, code:%d) The firewall detected an ICMP echo attack. icmp echo : ICMP (type:%d, code:%d) The firewall detected a TCP syn flood attack.
Page 211: Table 90 Icmp Notes
Chapter 18 The Logs Screens Table 89 Remote Management Logs LOG MESSAGE DESCRIPTION Attempted use of WWW service was blocked Remote Management: WWW denied according to remote management settings. Attempted use of HTTPS service was blocked Remote Management: HTTPS according to remote management settings. denied Attempted use of SSH service was blocked Remote Management: SSH denied...
Page 212: Table 91 Sip Logs
Chapter 18 The Logs Screens Table 90 ICMP Notes (continued) TYPE CODE DESCRIPTION Timestamp request message Timestamp Reply Timestamp reply message Information Request Information request message Information Reply Information reply message Table 91 SIP Logs LOG MESSAGE DESCRIPTION The listed SIP account was successfully registered with a SIP Registration Success SIP register server.
Page 213: Table 93 Fsm Logs: Caller Side
Chapter 18 The Logs Screens Table 93 FSM Logs: Caller Side LOG MESSAGE DESCRIPTION Someone used a phone connected to the listed phone VoIP Call Start Ph[Phone port to initiate a VoIP call to the listed destination. Port Number] <- Outgoing Call Number Someone used a phone connected to the listed phone VoIP Call Established...
Page 214 Chapter 18 The Logs Screens User’s Guide...
Page 215: The Status Screen
H A P T E R The Status Screen 19.1 Overview Use this screen to view a complete summary of your WiMAX Modem connection status. 19.2 Status Screen Click the STATUS icon in the navigation bar to go to this screen, where you can view the current status of the device, system resources, interfaces (LAN and WAN), and SIP accounts.
Page 216: Table 96 Status
Chapter 19 The Status Screen The following tables describe the labels in this screen. Table 96 Status LABEL DESCRIPTION Refresh Interval Select how often you want the WiMAX Modem to update this screen. Refresh Now Click this to update this screen immediately. Device Information System Name This field displays the WiMAX Modem system name.
Page 217 Chapter 19 The Status Screen Table 96 Status (continued) LABEL DESCRIPTION Frequency This field displays the radio frequency of the WiMAX Modem’s wireless connection to a base station. MAC address This field displays the Media Access Control address of the WiMAX Modem.
Page 218 Chapter 19 The Status Screen Table 96 Status (continued) LABEL DESCRIPTION System Uptime This field displays how long the WiMAX Modem has been running since it last started up. The WiMAX Modem starts up when you plug it in, when you restart it (ADVANCED > System Configuration > Restart), or when you reset it.
Page 219: Packet Statistics
Chapter 19 The Status Screen Table 96 Status (continued) LABEL DESCRIPTION Registration This field displays the current registration status of the SIP account. You have to register SIP accounts with a SIP server to use VoIP. If the SIP account is already registered with the SIP server, Click Unregister to delete the SIP account’s registration in the SIP server.
Page 220: Table 97 Packet Statistics
Chapter 19 The Status Screen The following table describes the fields in this screen. Table 97 Packet Statistics LABEL DESCRIPTION Port This column displays each interface of the WiMAX Modem. Status This field indicates whether or not the WiMAX Modem is using the interface.
Page 221: Wimax Site Information
Chapter 19 The Status Screen 19.2.2 WiMAX Site Information Click Status > WiMAX Site Information to open this screen. This read-only screen shows WiMAX frequency information for the WiMAX Modem. These settings can be configured in the ADVANCED > WAN Configuration > WiMAX Configuration screen.
Page 222: Dhcp Table
Chapter 19 The Status Screen 19.2.3 DHCP Table Click Status > DHCP Table to open this screen. This read-only screen shows the IP addresses, Host Names and MAC addresses of the devices currently connected to the WiMAX Modem. These settings can be configured in the ADVANCED > LAN Configuration >...
Page 223: Voip Statistics
Chapter 19 The Status Screen 19.2.4 VoIP Statistics Click Status > DHCP Table to open this screen. This read-only screen shows SIP registration information, status of calls and VoIP traffic statistics. These settings can be configured in the VOICE > Service Configuration > SIP Setting screen. Figure 94 VoIP Statistics Each field is described in the following table.
Page 224 Chapter 19 The Status Screen Table 100 VoIP Statistics LABEL DESCRIPTION Last Outgoing This field displays the last number the SIP account called. It displays Number N/A if the SIP account has never dialed a number. Call Statistics Phone This field displays the WiMAX Modem’s phone port number. Hook This field indicates whether the phone is on the hook or off the hook.
Page 225: Wimax Profile
Chapter 19 The Status Screen 19.2.5 WiMAX Profile Click Status > WiMAX Profile to open this screen. This read-only screen displays information about the security settings you are using. To configure these settings, go to the ADVANCED > WAN Configuration > Internet Connection screen. Note: Not all WiMAX Modem models have all the fields shown here.
Page 226 Chapter 19 The Status Screen Table 101 The WiMAX Profile Screen (continued) LABEL DESCRIPTION TTLS Inner EAP This field displays the type of secondary authentication method. Once a secure EAP-TTLS connection is established, the inner EAP is the protocol used to exchange security information between the mobile station, the base station and the AAA server to authenticate the mobile station.
Page 227: Troubleshooting And Specifications
Troubleshooting and Specifications Troubleshooting (229) Product Specifications (237)
Page 229: Troubleshooting
H A P T E R Troubleshooting This chapter offers some suggestions to solve problems you might encounter. The potential problems are divided into the following categories: • Power, Hardware Connections, and LEDs • WiMAX Modem Access and Login • Internet Access •...
Page 230: Wimax Modem Access And Login
Chapter 20 Troubleshooting Check the hardware connections. See the Quick Start Guide. Inspect your cables for damage. Contact the vendor to replace any damaged cables. Disconnect and re-connect the power adapter to the WiMAX Modem. If the problem continues, contact the vendor. 20.2 WiMAX Modem Access and Login I forgot the IP address for the WiMAX Modem.
Page 231 Chapter 20 Troubleshooting • If you changed the IP address (Section 5.2 on page 58), use the new IP address. • If you changed the IP address and have forgotten it, see the troubleshooting suggestions for I forgot the IP address for the WiMAX Modem. Check the hardware connections, and make sure the LEDs are behaving as expected.
Page 232: Internet Access
Chapter 20 Troubleshooting I cannot Telnet to the WiMAX Modem. See the troubleshooting suggestions for I cannot see or access the Login screen in the web configurator. Ignore the suggestions about your browser. 20.3 Internet Access I cannot access the Internet. Check the hardware connections, and make sure the LEDs are behaving as expected.
Page 233 Chapter 20 Troubleshooting Check the hardware connections, and make sure the LEDs are behaving as expected. See the Quick Start Guide and Section 1.2.1 on page Disconnect and re-connect the power adapter to the WiMAX Modem. If the problem continues, contact your ISP. The Internet connection is slow or intermittent.
Page 234: Phone Calls And Voip
Chapter 20 Troubleshooting Check the telephone connections and telephone wire. Make sure you have the VOICE > Service Configuration > SIP Settings screen properly configured (Chapter 10 on page 111). I can access the Internet, but cannot make VoIP calls. Make sure you have the VOICE >...
Page 235: Pop-Up Windows, Javascripts And Java Permissions
Chapter 20 Troubleshooting You will lose all of your changes when you push the Reset button. To reset the WiMAX Modem, Make sure the Power LED is on and not blinking. Press and hold the Reset button for five to ten seconds. Release the Reset button when the Power LED begins to blink.
Page 236 Chapter 20 Troubleshooting User’s Guide...
Page 237: Product Specifications
H A P T E R Product Specifications This chapter gives details about your WiMAX Modem’s hardware and firmware features. Table 102 Environmental and Hardware Specifications FEATURE DESCRIPTION Operating Temperature 0°C to 45°C Storage Temperature -25°C to 55°C Operating Humidity 10% ~ 90% (non-condensing) Storage Humidity 10% to 95% (non-condensing)
Page 238: Table 103 Radio Specifications
Chapter 21 Product Specifications Table 102 Environmental and Hardware Specifications (continued) EMS Approvals EN 301489-4 v1.3.1 RF Approvals EN 302326 Table 103 Radio Specifications FEATURE DESCRIPTION Media Access Protocol IEEE 802.16e WiMAX Bandwidth MAX-216M1R: 5MHz, 7MHz, 10MHz MAX-206M1R: 5MHz, 10MHz MAX-236M1R: 5MHz, 8.75MHz, 10MHz Data Rate Download:...
Page 239 Chapter 21 Product Specifications Table 104 Firmware Specifications (continued) FEATURE DESCRIPTION Content Filtering The WiMAX Modem can block access to web sites containing specified keywords. You can define time periods and days during which content filtering is enabled and include or exclude a range of users on the LAN from content filtering.
Page 240: Table 105 Standards Supported
Chapter 21 Product Specifications Table 104 Firmware Specifications (continued) FEATURE DESCRIPTION Time and Date Get the current time and date from an external server when you turn on your WiMAX Modem. You can also set the time manually. Logging Use the WiMAX Modem’s logging feature to view connection history, surveillance logs, and error messages.
Page 241: Table 106 Voice Features
Chapter 21 Product Specifications Table 105 Standards Supported (continued) STANDARD DESCRIPTION RFC 3263 Session Initiation Protocol (SIP): Locating SIP Servers RFC 3264 An Offer/Answer Model with the Session Description Protocol (SDP) RFC 3265 Session Initiation Protocol (SIP)-Specific Event Notification RFC 3323 A Privacy Mechanism for SIP RFC 3325 Private Extensions to the Session Initiation Protocol (SIP) for...
Page 242 Chapter 21 Product Specifications Table 106 Voice Features Phone config The phone configuration table allows you to customize the phone keypad combinations you use to access certain features on the WiMAX Modem, such as call waiting, call return, call forward, etc. The phone configuration table is configurable in command interpreter mode.
Page 243: Table 107 Star (*) And Pound (#) Code Support
Chapter 21 Product Specifications Table 106 Voice Features SIP ALG Your device is a SIP Application Layer Gateway (ALG). It allows VoIP calls to pass through NAT for devices behind it (such as a SIP-based VoIP software application on a computer). Other Voice SIP version 2 (Session Initiating Protocol RFC 3261) Features...
Page 244: Table 109 Radio Specifications
Chapter 21 Product Specifications Table 108 Environmental and Hardware Specifications (continued) Operating Humidity 20% ~ 90% (non-condensing) Storage Humidity 10% to 95% (non-condensing) Power Supply 12V DC, 2 A Power consumption Ethernet Interface Two auto-negotiating, auto-MDI/MDI-X NWay 10/100 Mbps RJ-45 Ethernet ports Telephony Interface Two analog ATA interfaces for standard telephones through RJ-11 FXS (Foreign Exchange Subscriber) analog connector...
Page 245: Table 110 Firmware Specifications
Chapter 21 Product Specifications Table 110 Firmware Specifications FEATURE DESCRIPTION Web-based Configuration Also known as “the web configurator”, this is a firmware- and Management Tool based management solution for the WiMAX Modem. You must connect using a compatible web browser in order to use it. High Speed Wireless The WiMAX Modem is ideal for high-speed wireless Internet Internet Access...
Page 246: Table 111 Standards Supported
Chapter 21 Product Specifications Table 110 Firmware Specifications (continued) FEATURE DESCRIPTION SIP ALG Your device is a SIP Application Layer Gateway (ALG). It allows VoIP calls to pass through NAT for devices behind it (such as a SIP-based VoIP software application on a computer).
Page 247 Chapter 21 Product Specifications Table 111 Standards Supported (continued) STANDARD DESCRIPTION RFC 2104 HMAC: Keyed-Hashing for Message Authentication RFC 2131 Dynamic Host Configuration Protocol RFC 2401 Security Architecture for the Internet Protocol RFC 2409 Internet Key Exchange RFC 2475 Architecture for Differentiated Services (Diffserv) RFC 2617 Hypertext Transfer Protocol (HTTP) Authentication: Basic and Digest Access Authentication...
Page 248: Table 112 Voice Features
Chapter 21 Product Specifications Table 112 Voice Features Call Park and Call park and pickup lets you put a call on hold (park) and then Pickup continue the call (pickup). The caller must still pay while the call is parked. When you park the call, you enter a number of your choice (up to eight digits), which you must enter again when you pick up the call.
Page 249: Table 113 Star (*) And Pound (#) Code Support
Chapter 21 Product Specifications Table 112 Voice Features Caller ID The WiMAX Modem supports caller ID, which allows you to see the originating number of an incoming call (on a phone with a suitable display). A Ringer Equivalence Number (REN) is used to determine the number of devices (like telephones or fax machines) that may be connected to the telephone line.
Page 250 Chapter 21 Product Specifications Table 113 Star (*) and Pound (#) Code Support *730 Deactivate Call Forwarding No Answer *740 Plus the forward to phone number to activate Call Forwarding Busy (no VM service plan) *911/911 Emergency phone number (same as dialing 911) *411/411 Wireless Information Services Note: To take full advantage of the supplementary phone services available through...
Page 251: Wall-Mounting
Chapter 21 Product Specifications 21.1 Wall-Mounting This section shows you how to mount your WiMAX Modem on a wall using the ZyXEL Wall-Mounting kit (not included). 21.1.1 The Wall-Mounting Kit The wall-mounting kit contains the following parts: Two Mortar Plugs (M4*L30 mm) Two Screws (M4*L30 mm) Wall-Mounting Chassis If any parts are missing, contact your vendor.
Page 252 Chapter 21 Product Specifications Attach the wall mounting chassis with the plugs and screws as shown below: Connect the MAX-216M1 to the wall mounting chassis by snapping the chassis’ two upper chassis hooks into the matching holes on the WiMAX Modem: Do not pinch or server the cable connections between the wall- mounting chassis the WiMAX Modem.
Page 253 Chapter 21 Product Specifications Snap the lower chassis hooks into the matching holes on the WiMAX Modem. The cable connections should come out either the left or right gaps between the wall- mounting chassis and the WiMAX Modem Once you have snapped the wall-mounting chassis in place, the WiMAX Modem is securely fastened to the wall.
Page 254 Chapter 21 Product Specifications User’s Guide...
Page 255: Appendices And Index
Appendices and Index WiMAX Security (257) Setting Up Your Computer’s IP Address (261) Pop-up Windows, JavaScripts and Java Permissions (289) IP Addresses and Subnetting (299) Importing Certificates (311) SIP Passthrough (343) Common Services (345) Legal Information (349) Customer Support (353)
Page 257: Appendix A Wimax Security
P P E N D I X WiMAX Security Wireless security is vital to protect your wireless communications. Without it, information transmitted over the wireless network would be accessible to any networking device within range. User Authentication and Data Encryption The WiMAX (IEEE 802.16) standard employs user authentication and encryption to ensure secured communication at all times.
Page 258 Appendix A WiMAX Security RADIUS RADIUS is based on a client-server model that supports authentication, authorization and accounting. The base station is the client and the server is the RADIUS server. The RADIUS server handles the following tasks: • Authentication Determines the identity of the users.
Page 259 Appendix A WiMAX Security the network. In addition to the shared key, password information exchanged is also encrypted to protect the network from unauthorized access. Diameter Diameter (RFC 3588) is a type of AAA server that provides several improvements over RADIUS in efficiency, security, and support for roaming. Security Association The set of information about user authentication and data encryption between two computers is known as a security association (SA).
Page 260 Appendix A WiMAX Security Authentication The WiMAX Modem supports EAP-TTLS authentication. EAP-TTLS (Tunneled Transport Layer Service) EAP-TTLS is an extension of the EAP-TLS authentication that uses certificates for only the server-side authentications to establish a secure connection (with EAP- TLS digital certifications are needed by both the server and the wireless clients for mutual authentication).
Page 261: Appendix B Setting Up Your Computer's Ip Address
P P E N D I X Setting Up Your Computer’s IP Address Note: Your specific ZyXEL device may not support all of the operating systems described in this appendix. See the product specifications for more information about which operating systems are supported. This appendix shows you how to configure the IP settings on your computer in order for it to be able to communicate with the other devices on your network.
Page 262: Figure 96 Windows Xp: Start Menu
Appendix B Setting Up Your Computer’s IP Address Windows XP/NT/2000 The following example uses the default Windows XP display theme but can also apply to Windows 2000 and Windows NT. Click Start > Control Panel. Figure 96 Windows XP: Start Menu In the Control Panel, click the Network Connections icon.
Page 263: Figure 98 Windows Xp: Control Panel > Network Connections > Properties
Appendix B Setting Up Your Computer’s IP Address Right-click Local Area Connection and then select Properties. Figure 98 Windows XP: Control Panel > Network Connections > Properties On the General tab, select Internet Protocol (TCP/IP) and then click Properties. Figure 99 Windows XP: Local Area Connection Properties User’s Guide...
Page 264: Figure 100 Windows Xp: Internet Protocol (Tcp/Ip) Properties
Appendix B Setting Up Your Computer’s IP Address The Internet Protocol TCP/IP Properties window opens. Figure 100 Windows XP: Internet Protocol (TCP/IP) Properties Select Obtain an IP address automatically if your network administrator or ISP assigns your IP address dynamically. Select Use the following IP Address and fill in the IP address, Subnet mask, and Default gateway fields if you have a static IP address that was assigned to you by your network administrator or ISP.
Page 265: Figure 101 Windows Vista: Start Menu
Appendix B Setting Up Your Computer’s IP Address Windows Vista This section shows screens from Windows Vista Professional. Click Start > Control Panel. Figure 101 Windows Vista: Start Menu In the Control Panel, click the Network and Internet icon. Figure 102 Windows Vista: Control Panel Click the Network and Sharing Center icon.
Page 266: Figure 104 Windows Vista: Network And Sharing Center
Appendix B Setting Up Your Computer’s IP Address Click Manage network connections. Figure 104 Windows Vista: Network and Sharing Center Right-click Local Area Connection and then select Properties. Figure 105 Windows Vista: Network and Sharing Center Note: During this procedure, click Continue whenever Windows displays a screen saying that it needs your permission to continue.
Page 267: Figure 106 Windows Vista: Local Area Connection Properties
Appendix B Setting Up Your Computer’s IP Address Select Internet Protocol Version 4 (TCP/IPv4) and then select Properties. Figure 106 Windows Vista: Local Area Connection Properties User’s Guide...
Page 268: Figure 107 Windows Vista: Internet Protocol Version 4 (Tcp/Ipv4) Properties
Appendix B Setting Up Your Computer’s IP Address The Internet Protocol Version 4 (TCP/IPv4) Properties window opens. Figure 107 Windows Vista: Internet Protocol Version 4 (TCP/IPv4) Properties Select Obtain an IP address automatically if your network administrator or ISP assigns your IP address dynamically. Select Use the following IP Address and fill in the IP address, Subnet mask, and Default gateway fields if you have a static IP address that was assigned to you by your network administrator or ISP.
Page 269: Figure 108 Mac Os X 10.4: Apple Menu
Appendix B Setting Up Your Computer’s IP Address Mac OS X: 10.3 and 10.4 The screens in this section are from Mac OS X 10.4 but can also apply to 10.3. Click Apple > System Preferences. Figure 108 Mac OS X 10.4: Apple Menu In the System Preferences window, click the Network icon.
Page 270: Figure 110 Mac Os X 10.4: Network Preferences
Appendix B Setting Up Your Computer’s IP Address When the Network preferences pane opens, select Built-in Ethernet from the network connection type list, and then click Configure. Figure 110 Mac OS X 10.4: Network Preferences For dynamically assigned settings, select Using DHCP from the Configure IPv4 list in the TCP/IP tab.
Page 271: Figure 112 Mac Os X 10.4: Network Preferences > Ethernet
Appendix B Setting Up Your Computer’s IP Address For statically assigned settings, do the following: • From the Configure IPv4 list, select Manually. • In the IP Address field, type your IP address. • In the Subnet Mask field, type your subnet mask. •...
Page 272: Figure 113 Mac Os X 10.4: Network Utility
Appendix B Setting Up Your Computer’s IP Address Verifying Settings Click Apply Now and close the window. Check your TCP/IP properties by clicking Applications > Utilities > Network Utilities, and then selecting the appropriate Network Interface from the Info tab. Figure 113 Mac OS X 10.4: Network Utility User’s Guide...
Page 273: Figure 114 Mac Os X 10.5: Apple Menu
Appendix B Setting Up Your Computer’s IP Address Mac OS X: 10.5 The screens in this section are from Mac OS X 10.5. Click Apple > System Preferences. Figure 114 Mac OS X 10.5: Apple Menu In System Preferences, click the Network icon. Figure 115 Mac OS X 10.5: Systems Preferences User’s Guide...
Page 274: Figure 116 Mac Os X 10.5: Network Preferences > Ethernet
Appendix B Setting Up Your Computer’s IP Address When the Network preferences pane opens, select Ethernet from the list of available connection types. Figure 116 Mac OS X 10.5: Network Preferences > Ethernet From the Configure list, select Using DHCP for dynamically assigned settings. For statically assigned settings, do the following: •...
Page 275: Figure 117 Mac Os X 10.5: Network Preferences > Ethernet
Appendix B Setting Up Your Computer’s IP Address • In the Router field, enter the IP address of your WiMAX Modem. Figure 117 Mac OS X 10.5: Network Preferences > Ethernet Click Apply and close the window. User’s Guide...
Page 276: Figure 118 Mac Os X 10.5: Network Utility
Appendix B Setting Up Your Computer’s IP Address Verifying Settings Check your TCP/IP properties by clicking Applications > Utilities > Network Utilities, and then selecting the appropriate Network interface from the Info tab. Figure 118 Mac OS X 10.5: Network Utility Linux: Ubuntu 8 (GNOME) This section shows you how to configure your computer’s TCP/IP settings in the GNU Object Model Environment (GNOME) using the Ubuntu 8 Linux distribution.
Page 277: Figure 119 Ubuntu 8: System > Administration Menu
Appendix B Setting Up Your Computer’s IP Address Click System > Administration > Network. Figure 119 Ubuntu 8: System > Administration Menu When the Network Settings window opens, click Unlock to open the Authenticate window. (By default, the Unlock button is greyed out until clicked.) You cannot make changes to your configuration unless you first enter your admin password.
Page 278: Figure 121 Ubuntu 8: Administrator Account Authentication
Appendix B Setting Up Your Computer’s IP Address In the Authenticate window, enter your admin account name and password then click the Authenticate button. Figure 121 Ubuntu 8: Administrator Account Authentication In the Network Settings window, select the connection that you want to configure, then click Properties.
Page 279: Figure 123 Ubuntu 8: Network Settings > Properties
Appendix B Setting Up Your Computer’s IP Address The Properties dialog box opens. Figure 123 Ubuntu 8: Network Settings > Properties • In the Configuration list, select Automatic Configuration (DHCP) if you have a dynamic IP address. • In the Configuration list, select Static IP address if you have a static IP address.
Page 280: Figure 124 Ubuntu 8: Network Settings > Dns
Appendix B Setting Up Your Computer’s IP Address If you know your DNS server IP address(es), click the DNS tab in the Network Settings window and then enter the DNS server information in the fields provided. Figure 124 Ubuntu 8: Network Settings > DNS Click the Close button to apply the changes.
Page 281: Figure 125 Ubuntu 8: Network Tools
Appendix B Setting Up Your Computer’s IP Address tab. The Interface Statistics column shows data if your connection is working properly. Figure 125 Ubuntu 8: Network Tools User’s Guide...
Page 282: Figure 126 Opensuse 10.3: K Menu > Computer Menu
Appendix B Setting Up Your Computer’s IP Address Linux: openSUSE 10.3 (KDE) This section shows you how to configure your computer’s TCP/IP settings in the K Desktop Environment (KDE) using the openSUSE 10.3 Linux distribution. The procedure, screens and file locations may vary depending on your specific distribution, release version, and individual configuration.
Page 283: Figure 127 Opensuse 10.3: K Menu > Computer Menu
Appendix B Setting Up Your Computer’s IP Address When the Run as Root - KDE su dialog opens, enter the admin password and click OK. Figure 127 openSUSE 10.3: K Menu > Computer Menu When the YaST Control Center window opens, select Network Devices and then click the Network Card icon.
Page 284: Figure 129 Opensuse 10.3: Network Settings
Appendix B Setting Up Your Computer’s IP Address When the Network Settings window opens, click the Overview tab, select the appropriate connection Name from the list, and then click the Configure button. Figure 129 openSUSE 10.3: Network Settings User’s Guide...
Page 285: Figure 130 Opensuse 10.3: Network Card Setup
Appendix B Setting Up Your Computer’s IP Address When the Network Card Setup window opens, click the Address tab Figure 130 openSUSE 10.3: Network Card Setup Select Dynamic Address (DHCP) if you have a dynamic IP address. Select Statically assigned IP Address if you have a static IP address. Fill in the IP address, Subnet mask, and Hostname fields.
Page 286: Figure 131 Opensuse 10.3: Network Settings
Appendix B Setting Up Your Computer’s IP Address If you know your DNS server IP address(es), click the Hostname/DNS tab in Network Settings and then enter the DNS server information in the fields provided. Figure 131 openSUSE 10.3: Network Settings Click Finish to save your settings and close the window.
Page 287: Figure 132 Opensuse 10.3: Knetwork Manager
Appendix B Setting Up Your Computer’s IP Address Verifying Settings Click the KNetwork Manager icon on the Task bar to check your TCP/IP properties. From the Options sub-menu, select Show Connection Information. Figure 132 openSUSE 10.3: KNetwork Manager When the Connection Status - KNetwork Manager window opens, click the Statistics tab to see if your connection is working properly.
Page 288 Appendix B Setting Up Your Computer’s IP Address User’s Guide...
Page 289: Appendix C Pop-Up Windows, Javascripts And Java Permissions
P P E N D I X Pop-up Windows, JavaScripts and Java Permissions In order to use the web configurator you need to allow: • Web browser pop-up windows from your device. • JavaScripts (enabled by default). • Java permissions (enabled by default). Note: Internet Explorer 6 screens are used here.
Page 290: Figure 135 Internet Options: Privacy
Appendix C Pop-up Windows, JavaScripts and Java Permissions In Internet Explorer, select Tools, Internet Options, Privacy. Clear the Block pop-ups check box in the Pop-up Blocker section of the screen. This disables any web pop-up blockers you may have enabled. Figure 135 Internet Options: Privacy Click Apply to save this setting.
Page 291: Figure 136 Internet Options: Privacy
Appendix C Pop-up Windows, JavaScripts and Java Permissions Select Settings…to open the Pop-up Blocker Settings screen. Figure 136 Internet Options: Privacy Type the IP address of your device (the web page that you do not want to have blocked) with the prefix “http://”. For example, http://192.168.167.1. User’s Guide...
Page 292: Figure 137 Pop-Up Blocker Settings
Appendix C Pop-up Windows, JavaScripts and Java Permissions Click Add to move the IP address to the list of Allowed sites. Figure 137 Pop-up Blocker Settings Click Close to return to the Privacy screen. Click Apply to save this setting. JavaScripts If pages of the web configurator do not display properly in Internet Explorer, check that JavaScripts are allowed.
Page 293: Figure 138 Internet Options: Security
Appendix C Pop-up Windows, JavaScripts and Java Permissions In Internet Explorer, click Tools, Internet Options and then the Security tab. Figure 138 Internet Options: Security Click the Custom Level... button. Scroll down to Scripting. Under Active scripting make sure that Enable is selected (the default). Under Scripting of Java applets make sure that Enable is selected (the default).
Page 294: Figure 139 Security Settings - Java Scripting
Appendix C Pop-up Windows, JavaScripts and Java Permissions Click OK to close the window. Figure 139 Security Settings - Java Scripting Java Permissions From Internet Explorer, click Tools, Internet Options and then the Security tab. Click the Custom Level... button. Scroll down to Microsoft VM.
Page 295: Figure 140 Security Settings - Java
Appendix C Pop-up Windows, JavaScripts and Java Permissions Click OK to close the window. Figure 140 Security Settings - Java JAVA (Sun) From Internet Explorer, click Tools, Internet Options and then the Advanced tab. Make sure that Use Java 2 for <applet> under Java (Sun) is selected. User’s Guide...
Page 296: Figure 141 Java (Sun)
Appendix C Pop-up Windows, JavaScripts and Java Permissions Click OK to close the window. Figure 141 Java (Sun) Mozilla Firefox Mozilla Firefox 2.0 screens are used here. Screens for other versions may vary. You can enable Java, Javascripts and pop-ups in one screen. Click Tools, then click Options in the screen that appears.
Page 297: Figure 143 Mozilla Firefox Content Security
Appendix C Pop-up Windows, JavaScripts and Java Permissions Click Content.to show the screen below. Select the check boxes as shown in the following screen. Figure 143 Mozilla Firefox Content Security User’s Guide...
Page 298 Appendix C Pop-up Windows, JavaScripts and Java Permissions User’s Guide...
Page 299: Appendix D Ip Addresses And Subnetting
P P E N D I X IP Addresses and Subnetting This appendix introduces IP addresses and subnet masks. IP addresses identify individual devices on a network. Every networking device (including computers, servers, routers, printers, etc.) needs an IP address to communicate across the network.
Page 300: Figure 144 Network Number And Host Id
Appendix D IP Addresses and Subnetting The following figure shows an example IP address in which the first three octets (192.168.1) are the network number, and the fourth octet (16) is the host ID. Figure 144 Network Number and Host ID How much of the IP address is the network number and how much is the host ID varies according to the subnet mask.
Page 301: Table 115 Subnet Masks
Appendix D IP Addresses and Subnetting By convention, subnet masks always consist of a continuous sequence of ones beginning from the leftmost bit of the mask, followed by a continuous sequence of zeros, for a total number of 32 bits. Subnet masks can be referred to by the size of the network number part (the bits with a “1”...
Page 302: Table 117 Alternative Subnet Mask Notation
Appendix D IP Addresses and Subnetting Notation Since the mask is always a continuous number of ones beginning from the left, followed by a continuous number of zeros for the remainder of the 32 bit mask, you can simply specify the number of ones instead of writing the value of each octet.
Page 303: Figure 145 Subnetting Example: Before Subnetting
Appendix D IP Addresses and Subnetting The following figure shows the company network before subnetting. Figure 145 Subnetting Example: Before Subnetting You can “borrow” one of the host ID bits to divide the network 192.168.1.0 into two separate sub-networks. The subnet mask is now 25 bits (255.255.255.128 or /25).
Page 304: Figure 146 Subnetting Example: After Subnetting
Appendix D IP Addresses and Subnetting The following figure shows the company network after subnetting. There are now two sub-networks, A and B. Figure 146 Subnetting Example: After Subnetting In a 25-bit subnet the host ID has 7 bits, so each sub-network has a maximum of –...
Page 305: Table 118 Subnet 1
Appendix D IP Addresses and Subnetting Each subnet contains 6 host ID bits, giving 2 - 2 or 62 hosts for each subnet (a host ID of all zeroes is the subnet itself, all ones is the subnet’s broadcast address). Table 118 Subnet 1 LAST OCTET BIT IP/SUBNET MASK...
Page 306: Table 122 Eight Subnets
Appendix D IP Addresses and Subnetting Table 121 Subnet 4 (continued) LAST OCTET BIT IP/SUBNET MASK NETWORK NUMBER VALUE Subnet Address: Lowest Host ID: 192.168.1.193 192.168.1.192 Broadcast Address: Highest Host ID: 192.168.1.254 192.168.1.255 Example: Eight Subnets Similarly, use a 27-bit mask to create eight subnets (000, 001, 010, 011, 100, 101, 110 and 111).
Page 307: Configuring Ip Addresses
Appendix D IP Addresses and Subnetting The following table is a summary for subnet planning on a network with a 16-bit network number. Table 124 16-bit Network Number Subnet Planning NO. “BORROWED” NO. HOSTS PER SUBNET MASK HOST BITS SUBNETS SUBNET 255.255.128.0 (/17) 32766...
Page 308 Appendix D IP Addresses and Subnetting address that you entered. You don't need to change the subnet mask computed by the WiMAX Modem unless you are instructed to do otherwise. Private IP Addresses Every machine on the Internet must have a unique address. If your networks are isolated from the Internet (running only between two branch offices, for example) you can assign any IP addresses to the hosts without problems.
Page 309: Figure 147 Conflicting Computer Ip Addresses Example
Appendix D IP Addresses and Subnetting address to computer A or setting computer A to obtain an IP address automatically. Figure 147 Conflicting Computer IP Addresses Example Conflicting Router IP Addresses Example Since a router connects different networks, it must have interfaces using different network numbers.
Page 310: Figure 149 Conflicting Computer And Router Ip Addresses Example
Appendix D IP Addresses and Subnetting The computer cannot access the Internet. This problem can be solved by assigning a different IP address to the computer or the router’s LAN port. Figure 149 Conflicting Computer and Router IP Addresses Example User’s Guide...
Page 311: Appendix E Importing Certificates
P P E N D I X Importing Certificates This appendix shows you how to import public key certificates into your web browser. Public key certificates are used by web browsers to ensure that a secure web site is legitimate. When a certificate authority such as VeriSign, Comodo, or Network Solutions, to name a few, receives a certificate request from a website operator, they confirm that the web domain and contact information in the request match those on public record with a domain name registrar.
Page 312: Figure 150 Internet Explorer 7: Certification Error
Appendix E Importing Certificates Internet Explorer The following example uses Microsoft Internet Explorer 7 on Windows XP Professional; however, they can also apply to Internet Explorer on Windows Vista. If your device’s web configurator is set to use SSL certification, then the first time you browse to it you are presented with a certification error.
Page 313: Figure 152 Internet Explorer 7: Certificate Error
Appendix E Importing Certificates In the Address Bar, click Certificate Error > View certificates. Figure 152 Internet Explorer 7: Certificate Error In the Certificate dialog box, click Install Certificate. Figure 153 Internet Explorer 7: Certificate User’s Guide...
Page 314: Figure 154 Internet Explorer 7: Certificate Import Wizard
Appendix E Importing Certificates In the Certificate Import Wizard, click Next. Figure 154 Internet Explorer 7: Certificate Import Wizard If you want Internet Explorer to Automatically select certificate store based on the type of certificate, click Next again and then go to step 9. Figure 155 Internet Explorer 7: Certificate Import Wizard User’s Guide...
Page 315: Figure 156 Internet Explorer 7: Certificate Import Wizard
Appendix E Importing Certificates Otherwise, select Place all certificates in the following store and then click Browse. Figure 156 Internet Explorer 7: Certificate Import Wizard In the Select Certificate Store dialog box, choose a location in which to save the certificate and then click OK.
Page 316: Figure 158 Internet Explorer 7: Certificate Import Wizard
Appendix E Importing Certificates In the Completing the Certificate Import Wizard screen, click Finish. Figure 158 Internet Explorer 7: Certificate Import Wizard 10 If you are presented with another Security Warning, click Yes. Figure 159 Internet Explorer 7: Security Warning User’s Guide...
Page 317: Figure 160 Internet Explorer 7: Certificate Import Wizard
Appendix E Importing Certificates 11 Finally, click OK when presented with the successful certificate installation message. Figure 160 Internet Explorer 7: Certificate Import Wizard 12 The next time you start Internet Explorer and go to a ZyXEL web configurator page, a sealed padlock icon appears in the address bar. Click it to view the page’s Website Identification information.
Page 318: Figure 162 Internet Explorer 7: Public Key Certificate File
Appendix E Importing Certificates Installing a Stand-Alone Certificate File in Internet Explorer Rather than browsing to a ZyXEL web configurator and installing a public key certificate when prompted, you can install a stand-alone certificate file if one has been issued to you. Double-click the public key certificate file.
Page 319: Figure 164 Internet Explorer 7: Tools Menu
Appendix E Importing Certificates Removing a Certificate in Internet Explorer This section shows you how to remove a public key certificate in Internet Explorer Open Internet Explorer and click TOOLS > Internet Options. Figure 164 Internet Explorer 7: Tools Menu In the Internet Options dialog box, click Content >...
Page 320: Figure 166 Internet Explorer 7: Certificates
Appendix E Importing Certificates In the Certificates dialog box, click the Trusted Root Certificates Authorities tab, select the certificate that you want to delete, and then click Remove. Figure 166 Internet Explorer 7: Certificates In the Certificates confirmation, click Yes. Figure 167 Internet Explorer 7: Certificates In the Root Certificate Store dialog box, click Yes.
Page 321 Appendix E Importing Certificates The next time you go to the web site that issued the public key certificate you just removed, a certification error appears. User’s Guide...
Page 322: Figure 169 Firefox 2: Website Certified By An Unknown Authority
Appendix E Importing Certificates Firefox The following example uses Mozilla Firefox 2 on Windows XP Professional; however, the screens can also apply to Firefox 2 on all platforms. If your device’s web configurator is set to use SSL certification, then the first time you browse to it you are presented with a certification error.
Page 323: Figure 170 Firefox 2: Page Info
Appendix E Importing Certificates The certificate is stored and you can now connect securely to the web configurator. A sealed padlock appears in the address bar, which you can click to open the Page Info > Security window to view the web page’s security information.
Page 324: Figure 171 Firefox 2: Tools Menu
Appendix E Importing Certificates Installing a Stand-Alone Certificate File in Firefox Rather than browsing to a ZyXEL web configurator and installing a public key certificate when prompted, you can install a stand-alone certificate file if one has been issued to you. Open Firefox and click TOOLS >...
Page 325: Figure 173 Firefox 2: Certificate Manager
Appendix E Importing Certificates In the Certificate Manager dialog box, click Web Sites > Import. Figure 173 Firefox 2: Certificate Manager Use the Select File dialog box to locate the certificate and then click Open. Figure 174 Firefox 2: Select File The next time you visit the web site, click the padlock in the address bar to open the Page Info >...
Page 326: Figure 175 Firefox 2: Tools Menu
Appendix E Importing Certificates Removing a Certificate in Firefox This section shows you how to remove a public key certificate in Firefox 2. Open Firefox and click TOOLS > Options. Figure 175 Firefox 2: Tools Menu In the Options dialog box, click ADVANCED > Encryption > View Certificates. Figure 176 Firefox 2: Options User’s Guide...
Page 327: Figure 177 Firefox 2: Certificate Manager
Appendix E Importing Certificates In the Certificate Manager dialog box, select the Web Sites tab, select the certificate that you want to remove, and then click Delete. Figure 177 Firefox 2: Certificate Manager In the Delete Web Site Certificates dialog box, click OK. Figure 178 Firefox 2: Delete Web Site Certificates The next time you go to the web site that issued the public key certificate you just removed, a certification error appears.
Page 328: Figure 179 Opera 9: Certificate Signer Not Found
Appendix E Importing Certificates Opera The following example uses Opera 9 on Windows XP Professional; however, the screens can apply to Opera 9 on all platforms. If your device’s web configurator is set to use SSL certification, then the first time you browse to it you are presented with a certification error.
Page 329: Figure 180 Opera 9: Security Information
Appendix E Importing Certificates The next time you visit the web site, click the padlock in the address bar to open the Security information window to view the web page’s security details. Figure 180 Opera 9: Security information User’s Guide...
Page 330: Figure 181 Opera 9: Tools Menu
Appendix E Importing Certificates Installing a Stand-Alone Certificate File in Opera Rather than browsing to a ZyXEL web configurator and installing a public key certificate when prompted, you can install a stand-alone certificate file if one has been issued to you. Open Opera and click TOOLS >...
Page 331: Figure 182 Opera 9: Preferences
Appendix E Importing Certificates In Preferences, click ADVANCED > Security > Manage certificates. Figure 182 Opera 9: Preferences User’s Guide...
Page 332: Figure 183 Opera 9: Certificate Manager
Appendix E Importing Certificates In the Certificates Manager, click Authorities > Import. Figure 183 Opera 9: Certificate manager Use the Import certificate dialog box to locate the certificate and then click Open. Figure 184 Opera 9: Import certificate User’s Guide...
Page 333: Figure 185 Opera 9: Install Authority Certificate
Appendix E Importing Certificates In the Install authority certificate dialog box, click Install. Figure 185 Opera 9: Install authority certificate Next, click OK. Figure 186 Opera 9: Install authority certificate The next time you visit the web site, click the padlock in the address bar to open the Security information window to view the web page’s security details.
Page 334: Figure 187 Opera 9: Tools Menu
Appendix E Importing Certificates Removing a Certificate in Opera This section shows you how to remove a public key certificate in Opera 9. Open Opera and click TOOLS > Preferences. Figure 187 Opera 9: Tools Menu In Preferences, ADVANCED > Security > Manage certificates. Figure 188 Opera 9: Preferences User’s Guide...
Page 335: Figure 189 Opera 9: Certificate Manager
Appendix E Importing Certificates In the Certificates manager, select the Authorities tab, select the certificate that you want to remove, and then click Delete. Figure 189 Opera 9: Certificate manager The next time you go to the web site that issued the public key certificate you just removed, a certification error appears.
Page 336: Figure 190 Konqueror 3.5: Server Authentication
Appendix E Importing Certificates Konqueror The following example uses Konqueror 3.5 on openSUSE 10.3, however the screens apply to Konqueror 3.5 on all Linux KDE distributions. If your device’s web configurator is set to use SSL certification, then the first time you browse to it you are presented with a certification error.
Page 337: Figure 192 Konqueror 3.5: Kde Ssl Information
Appendix E Importing Certificates Click the padlock in the address bar to open the KDE SSL Information window and view the web page’s security details. Figure 192 Konqueror 3.5: KDE SSL Information User’s Guide...
Page 338: Figure 193 Konqueror 3.5: Public Key Certificate File
Appendix E Importing Certificates Installing a Stand-Alone Certificate File in Konqueror Rather than browsing to a ZyXEL web configurator and installing a public key certificate when prompted, you can install a stand-alone certificate file if one has been issued to you. Double-click the public key certificate file.
Page 339 Appendix E Importing Certificates The next time you visit the web site, click the padlock in the address bar to open the KDE SSL Information window to view the web page’s security details. User’s Guide...
Page 340: Figure 196 Konqueror 3.5: Settings Menu
Appendix E Importing Certificates Removing a Certificate in Konqueror This section shows you how to remove a public key certificate in Konqueror 3.5. Open Konqueror and click Settings > Configure Konqueror. Figure 196 Konqueror 3.5: Settings Menu In the Configure dialog box, select Crypto. On the Peer SSL Certificates tab, select the certificate you want to delete and then click Remove.
Page 341 Appendix E Importing Certificates Note: There is no confirmation when you remove a certificate authority, so be absolutely certain you want to go through with it before clicking the button. User’s Guide...
Page 342 Appendix E Importing Certificates User’s Guide...
Page 343: Appendix F Sip Passthrough
P P E N D I X SIP Passthrough Enabling/Disabling the SIP ALG You can turn off the WiMAX Modem SIP ALG to avoid retranslating the IP address of an existing SIP device that is using STUN. If you want to use STUN with a SIP client device (a SIP phone or IP phone for example) behind the WiMAX Modem, use the ip alg disable ALG_SIP command to turn off the SIP ALG.
Page 344 Appendix F SIP Passthrough User’s Guide...
Page 345: Appendix G Common Services
P P E N D I X Common Services The following table lists some commonly-used services and their associated protocols and port numbers. For a comprehensive list of port numbers, ICMP type/ code numbers and services, visit the IANA (Internet Assigned Number Authority) web site.
Page 346 Appendix G Common Services Table 125 Commonly Used Services (continued) NAME PROTOCOL PORT(S) DESCRIPTION User-Defined The IPSEC ESP (Encapsulation (IPSEC_TUNNEL) Security Protocol) tunneling protocol uses this service. FINGER Finger is a UNIX or Internet related command that can be used to find out if a user is logged on.
Page 347 Appendix G Common Services Table 125 Commonly Used Services (continued) NAME PROTOCOL PORT(S) DESCRIPTION PPTP 1723 Point-to-Point Tunneling Protocol enables secure transfer of data over public networks. This is the control channel. PPTP_TUNNEL User-Defined PPTP (Point-to-Point Tunneling (GRE) Protocol) enables secure transfer of data over public networks.
Page 348 Appendix G Common Services Table 125 Commonly Used Services (continued) NAME PROTOCOL PORT(S) DESCRIPTION TFTP Trivial File Transfer Protocol is an Internet file transfer protocol similar to FTP, but uses the UDP (User Datagram Protocol) rather than TCP (Transmission Control Protocol). VDOLIVE 7000 Another videoconferencing solution.
Page 349: Appendix H Legal Information
ZyXEL Communications Corporation. Published by ZyXEL Communications Corporation. All rights reserved. Disclaimers ZyXEL does not assume any liability arising out of the application or use of any products, or software described herein.
Page 350 Appendix H Legal Information Certifications Federal Communications Commission (FCC) Interference Statement The device complies with Part 15 of FCC rules. Operation is subject to the following two conditions: • This device may not cause harmful interference. • This device must accept any interference received, including interference that may cause undesired operations.
Page 351: Zyxel Limited Warranty
Appendix H Legal Information 第十四條低功率射頻電機之使用不得影響飛航安全及干擾合法通信；經發現有干擾現象時，應立即停用，並改善至無干擾時方得繼續使用。前項合法通信，指依電信規定作業之無線電信。低功率射頻電機須忍受合法通信或工業、科學及醫療用電波輻射性電機設備之干擾。本機限在不干擾合法電臺與不受被干擾保障條件下於室內使用。減少電磁波影響，請妥適使用。 Notices Changes or modifications not expressly approved by the party responsible for compliance could void the user's authority to operate the equipment. This Class B digital apparatus complies with Canadian ICES-003. Cet appareil numérique de la classe B est conforme à...
Page 352 Appendix H Legal Information implied, including any implied warranty of merchantability or fitness for a particular use or purpose. ZyXEL shall in no event be held liable for indirect or consequential damages of any kind to the purchaser. To obtain the services of this warranty, contact your vendor. You may also refer to the warranty policy for the region in which you bought the device at http:// www.zyxel.com/web/support_warranty_info.php.
Page 353: Appendix I Customer Support
• Sales E-mail: sales@zyxel.com.tw • Telephone: +886-3-578-3942 • Fax: +886-3-578-2439 • Web: www.zyxel.com • Regular Mail: ZyXEL Communications Corp., 6 Innovation Road II, Science Park, Hsinchu 300, Taiwan China - ZyXEL Communications (Beijing) Corp. • Support E-mail: cso.zycn@zyxel.cn • Sales E-mail: sales@zyxel.cn •...
Page 354 Czech Republic • E-mail: info@cz.zyxel.com • Telephone: +420-241-091-350 • Fax: +420-241-091-359 • Web: www.zyxel.cz • Regular Mail: ZyXEL Communications, Czech s.r.o., Modranská 621, 143 01 Praha 4 - Modrany, Ceská Republika Denmark • Support E-mail: support@zyxel.dk • Sales E-mail: sales@zyxel.dk •...
Page 355 Appendix I Customer Support • Fax: +358-9-4780-8448 • Web: www.zyxel.fi • Regular Mail: ZyXEL Communications Oy, Malminkaari 10, 00700 Helsinki, Finland France • E-mail: info@zyxel.fr • Telephone: +33-4-72-52-97-97 • Fax: +33-4-72-52-19-20 • Web: www.zyxel.fr • Regular Mail: ZyXEL France, 1 rue des Vergers, Bat. 1 / C, 69760 Limonest,...
Page 356 • Support E-mail: support@zyxel.com • Support Telephone: +1-800-978-7222 • Sales E-mail: sales@zyxel.com • Sales Telephone: +1-714-632-0882 • Fax: +1-714-632-0858 • Web: www.zyxel.com • Regular Mail: ZyXEL Communications Inc., 1130 N. Miller St., Anaheim, CA 92806-2001, U.S.A. Norway • Support E-mail: support@zyxel.no User’s Guide...
Page 357 Appendix I Customer Support • Sales E-mail: sales@zyxel.no • Telephone: +47-22-80-61-80 • Fax: +47-22-80-61-81 • Web: www.zyxel.no • Regular Mail: ZyXEL Communications A/S, Nils Hansens vei 13, 0667 Oslo, Norway Poland • E-mail: info@pl.zyxel.com • Telephone: +48-22-333 8250 • Fax: +48-22-333 8251 •...
Page 358 • Support E-mail: support@zyxel.se • Sales E-mail: sales@zyxel.se • Telephone: +46-31-744-7700 • Fax: +46-31-744-7701 • Web: www.zyxel.se • Regular Mail: ZyXEL Communications A/S, Sjöporten 4, 41764 Göteborg, Sweden Taiwan • Support E-mail: support@zyxel.com.tw • Sales E-mail: sales@zyxel.com.tw • Telephone: +886-2-27399889 •...
Page 359 • Support E-mail: support@zyxel.co.uk • Sales E-mail: sales@zyxel.co.uk • Telephone: +44-1344-303044, 0845 122 0301 (UK only) • Fax: +44-1344-303034 • Web: www.zyxel.co.uk • Regular Mail: ZyXEL Communications UK Ltd., 11 The Courtyard, Eastern Road, Bracknell, Berkshire RG12 2XB, United Kingdom (UK) User’s Guide...
Page 360 Appendix I Customer Support User’s Guide...
Page 361: Index
Index Index and certificates call Europe type service mode forwarding hold 134–136 accounting server park and pickup see AAA return ACK message service mode 134–136 activity transfer 135–136 Advanced Encryption Standard waiting 135–136, 248 see AES caller ID CBC-MAC CCMP 96, 246, 249 257, 259 alternative subnet mask notation...
Page 362 Index see CCMP download frequency see DL frequency circuit-switched telephone networks DS field Class of Service (CoS) DSCP client-server see DiffServ protocol DTMF detection and generation CMAC see MAC duplex codec dynamic DNS 115, 249 102, 245 comfort noise Dynamic Host Configuration Protocol generation see DHCP contact information...
Page 363 Index G.168 129, 246 48, 81, 257 request and reply G.711 116, 249 G.726 G.729 116, 249 listening port humidity hybrid waveform codec Management Information Base (MIB) manual site survey IANA 85, 86 Media Access Protocol identity 79, 257 Message Authentication Code idle timeout see MAC IEEE 802.16...
Page 364 Index services public-private key pairs 147, 164 Network Address Translation pulse code modulation see NAT 195, 249 OK response Quality of Service operating humidity see QoS operating temperature Quality of Service, see QoS outbound proxy quick dialing 115, 126 server RADIUS 79, 258 Message Types...
Page 365 Index specifications physical and environmental 243, 244 speed dial safety warnings 77, 78 stateful inspection secure communication 48, 81, 257 storage humidity secure connection storage temperature security 244, 257 STUN security association 115, 126 subnet see SA mask server subnetting outbound proxy subscriber station services...
Page 366 Index Wireless Metropolitan Area Network see MAN wireless network unauthorized device access uniform resource identifier standard UPnP wireless security 244, 257 USA type call service mode wizard setup use NAT use NAT feature user agent, SIP user authentication user ID user name 129, 246 verification...

This manual is also suitable for:

Max-216m1r Max-236m1r Max-216m1r plus Max-216mr

ZyXEL Communications MAX-206M1R series User Manual

About this User's Guide

Document Conventions

Safety Warnings

Contents Overview

Table of Contents

List of Figures

List of Tables

Introduction and Wizards

Part I: Introduction and Wizards

Chapter 1 Getting Started

Chapter 2 Introducing the Web Configurator

Chapter 3 Internet Connection Wizard

Chapter 4 Voip Connection Wizard

Basic Screens

Part II: Basic Screens

Chapter 5 The Setup Screens

Advanced Screens

Part III: Advanced Screens

Chapter 6 The LAN Configuration Screens

Chapter 7 The WAN Configuration Screens

Chapter 8 The NAT Configuration Screens

Chapter 9 The System Configuration Screens

Voice Screens

Chapter 10 The Service Configuration Screens

Chapter 11 The Phone Screens

Chapter 12 The Phone Book Screens

Tools & Status Screens

Chapter 13 The Certificates Screens

Chapter 14 The Firewall Screens

Quick Links

Troubleshooting

Related Manuals for ZyXEL Communications MAX-206M1R series

Summary of Contents for ZyXEL Communications MAX-206M1R series