1. Manuals
  2. Brands
  3. ZyXEL Communications Manuals
  4. Wireless Router
  5. MAX-207HW2R
  6. User manual

ZyXEL Communications MAX-207HW2R User Manual

Wimax mimo indoor simple cpe (2.5 ghz)
Hide thumbs
Table of Contents

Advertisement

Quick Links

Download this manual
MAX-207HW2R
WiMAX MIMO Indoor Simple CPE (2.5 GHz)
Default Login Details
IP Address
http://192.168.1.1
Admin
Name and
Password
User Name
and
Password
www.zyxel.com
Firmware Version 1.0
Edition 1, 02/2010
www.zyxel.com
admin
1234
User
user
Copyright © 2010
ZyXEL Communications Corporation

Advertisement

Table of Contents
loading

Related Manuals for ZyXEL Communications MAX-207HW2R

Summary of Contents for ZyXEL Communications MAX-207HW2R

  • Page 1 MAX-207HW2R WiMAX MIMO Indoor Simple CPE (2.5 GHz) Default Login Details IP Address http://192.168.1.1 Admin admin Name and 1234 Password User Name User user Password www.zyxel.com Firmware Version 1.0 Edition 1, 02/2010 www.zyxel.com Copyright © 2010 ZyXEL Communications Corporation...

  • Page 3: About This User's Guide

    • Command Reference Guide The Command Reference Guide explains how to use the Command-Line Interface (CLI) and CLI commands to configure the MAX-207HW2R. Note: It is recommended you use the web configurator to configure the MAX- 207HW2R. • Support Disc Refer to the included CD for support documents.
  • Page 4 • Product model and serial number. • Warranty Information. • Date that you received your device. • Brief description of the problem and the steps you took to solve it. MAX-207HW2R User’s Guide...

  • Page 5: Document Conventions

    Syntax Conventions • The MAX-207HW2R may be referred to as the “MAX-207HW2R”, the “device”, the “system” or the “product” in this User’s Guide. • Product labels, screen names, field labels and field choices are all in bold font.
  • Page 6 Document Conventions Icons Used in Figures Figures in this User’s Guide may use the following generic icons. The MAX- 207HW2R icon is not an exact representation of your MAX-207HW2R.\ Table 1 Common Icons WiMAX Device WiMAX Access Point Computer Notebook...

  • Page 7: Safety Warnings

    Your product is marked with this symbol, which is known as the WEEE mark. WEEE stands for Waste Electronics and Electrical Equipment. It means that used electrical and electronic products should not be mixed with general waste. Used electrical and electronic equipment should be treated separately. MAX-207HW2R User’s Guide...
  • Page 8 Safety Warnings MAX-207HW2R User’s Guide...

  • Page 9: Table Of Contents

    The Certificates Screens ......................127 The Remote Management Screens ..................135 The Firewall Screens ....................... 145 Content Filter ........................... 155 The Password Setup Screen ....................159 The Status Screen ........................161 Troubleshooting ........................165 Product Specifications ......................173 MAX-207HW2R User’s Guide...
  • Page 10 Contents Overview MAX-207HW2R User’s Guide...

  • Page 11: Table Of Contents

    1.1.2 Make Calls via Internet Telephony Service Provider ..........20 1.2 MAX-207HW2R Hardware ....................21 1.2.1 LEDs .......................... 21 1.3 Good Habits for Managing the MAX-207HW2R ..............22 Chapter 2 Introducing the Web Configurator ..................23 2.1 Overview ..........................23 2.1.1 Accessing the Web Configurator ................
  • Page 12 6.2.3 WPA(2)-PSK ......................62 6.2.4 Wireless LAN Advanced Setup ................. 63 6.3 MAC Filter ........................64 6.4 WPS ............................ 65 6.5 Wireless LAN Technical Reference ..................66 6.5.1 Additional Wireless Terms ..................66 6.5.2 Wireless Security Overview ..................66 MAX-207HW2R User’s Guide...
  • Page 13 10.1 Overview ..........................97 10.1.1 What You Can Do in This Chapter ................97 10.1.2 What You Need to Know ..................97 10.1.3 Before you Begin ...................... 99 10.2 SIP Settings ........................99 10.2.1 Advanced SIP Settings ..................100 MAX-207HW2R User’s Guide...
  • Page 14 13.1.1 What You Can Do in This Chapter ................. 127 13.1.2 What You Need to Know ..................127 13.2 My Certificates ......................... 128 13.3 Trusted CAs ........................129 13.4 Technical Reference ......................129 13.4.1 Certificate Authorities ..................... 130 13.4.2 Verifying a Certificate ..................... 132 MAX-207HW2R User’s Guide...
  • Page 15 16.1.1 What You Can Do in This Chapter ................. 155 16.2 Filter ..........................156 16.3 Schedule .......................... 158 Chapter 17 The Password Setup Screen....................159 17.1 Overview .......................... 159 17.2 Password Setup ......................159 Chapter 18 The Status Screen......................... 161 MAX-207HW2R User’s Guide...
  • Page 16 19.2 MAX-207HW2R Access and Login .................. 166 19.3 Internet Access ........................ 168 19.4 Phone Calls and VoIP ...................... 170 19.5 Reset the MAX-207HW2R to Its Factory Defaults ............171 19.5.1 Pop-up Windows, JavaScripts and Java Permissions ........... 171 Chapter 20 Product Specifications ......................

  • Page 17: User's Guide

    User’s Guide...

  • Page 19: Getting Started

    Getting Started 1.1 About Your MAX-207HW2R The MAX-207HW2R has a built-in switch and one phone port. It allows you to access the Internet by connecting to a WiMAX wireless network. You can use a traditional analog telephone to make Internet calls using the MAX- 207HW2R’s Voice over IP (VoIP) communication capabilities.

  • Page 20: Make Calls Via Internet Telephony Service Provider

    IP address without using a SIP proxy server. Figure 2 MAX-207HW2R’s VoIP Features - Peer-to-Peer Calls • Calls via a VoIP service provider - The MAX-207HW2R sends your call to a VoIP service provider’s SIP server which forwards your calls to either VoIP or PSTN phones.

  • Page 21: Max-207Hw2R Hardware

    STRENGTH INDICATORS VOICE LEDS 1 & 2 WLAN The following table describes your MAX-207HW2R’s LEDs (from right to left). Table 2 The MAX-207HW2R STATE DESCRIPTION Power The MAX-207HW2R is not receiving power. The MAX-207HW2R is receiving power but has been unable to start up correctly or is not receiving enough power.

  • Page 22: Good Habits For Managing The Max-207Hw2R

    1.3 Good Habits for Managing the MAX- 207HW2R Do the following things regularly to make the MAX-207HW2R more secure and to manage the MAX-207HW2R more effectively. • Change the password. Use a password that’s not easy to guess and that consists of different types of characters, such as numbers and letters.

  • Page 23: Introducing The Web Configurator

    Appendix C on page 215 for more information on configuring your web browser. 2.1.1 Accessing the Web Configurator Make sure your MAX-207HW2R hardware is properly connected (refer to the Quick Start Guide for more information). Launch your web browser. Enter "192.168.1.1" as the URL.

  • Page 24: The Reset Button

    Reset button to reload the factory-default configuration file. This means that you will lose all configurations that you had previously and the password will be reset to “1234”. 2.1.2.1 Using The Reset Button Make sure the Power light is on (not blinking). MAX-207HW2R User’s Guide...

  • Page 25: The Main Screen

    2.2 The Main Screen When you first log into the web configurator and by-pass the wizard, the Main screen appears. Here you can view a concise summary of your MAX-207HW2R connection status. This is also the default “home” page for the ZyXEL web configurator and it contains conveniently-placed shortcuts to all of the other screens.
  • Page 26 Strength Indicator Displays a visual representation of the quality of your WiMAX connection. • Disconnected - Zero bars • Poor reception - One bar • Good reception - Two bars • Excellent reception - Three bars MAX-207HW2R User’s Guide...
  • Page 27 This field indicates how long the MAX-207HW2R has been on. This resets every time you shut the device down or restart it. Note: For security reasons, the MAX-207HW2R automatically logs you out if you do not use the web configurator for five minutes. If this happens, simply log in again.
  • Page 28 Chapter 2 Introducing the Web Configurator MAX-207HW2R User’s Guide...

  • Page 29: Technical Reference

    Technical Reference...

  • Page 31: The Setup Screens

    3.1.1 What You Can Do in This Chapter • The LAN Configuration screen (Section 3.2 on page 32) lets you configure the MAX-207HW2R’s IP address and subnet mask. • The DHCP Client screen (Section 3.3 on page 33) lets you view all DHCP client information.

  • Page 32: Before You Begin

    Quick Start Guide. 3.2 LAN Configuration Click the SETUP icon in the navigation bar to set up the MAX-207HW2R’s IP address and subnet mask. This screen displays this screen by default. If you are in...

  • Page 33: Dhcp Client

    LABEL DESCRIPTION IP Address Enter the IP address of the MAX-207HW2R on the LAN. Note: This field is the IP address you use to access the MAX-207HW2R on the LAN. If the web configurator is running on a computer on the LAN, you lose access to it as soon as you change this field and click Apply.
  • Page 34 LABEL DESCRIPTION The number of the item in this list. IP Address This field displays the IP address the MAX-207HW2R assigned to a computer in the network. Host Name This field displays the system name of the computer to which the MAX-207HW2R assigned the IP address.

  • Page 35: Time Setting

    Table 7 SETUP > Time Setting LABEL DESCRIPTION Current Time and Date Current Time Displays the current time according to the MAX-207HW2R. Current Date Displays the current time according to the MAX-207HW2R. Time and Date Setup Manual Select this if you want to specify the current date and time in the fields below.

  • Page 36: Pre-Defined Ntp Time Servers List

    Click to restore your previously saved settings. 3.4.1 Pre-Defined NTP Time Servers List The MAX-207HW2R uses a pre-defined list of NTP time servers if you do not specify a time server or it cannot synchronize with the time server you specified.

  • Page 37: Resetting The Time

    3.4.2 Resetting the Time The MAX-207HW2R automatically resets the time in the following circumstances: • When the device starts up, such as when you press the Power button. • When you click Apply in the SETUP > Time Setting screen.
  • Page 38 Chapter 3 The Setup Screens MAX-207HW2R User’s Guide...

  • Page 39: The Status Screen

    The following tables describe the labels in this screen. Table 9 Advanced > Status LABEL DESCRIPTION Refresh Interval Select how often you want the MAX-207HW2R to update this screen. Refresh Now Click this to update this screen immediately. MAX-207HW2R User’s Guide...
  • Page 40 This field displays what DHCP services the MAX-207HW2R is using in the WAN. Choices are: Client - The MAX-207HW2R is a DHCP client in the WAN. Its IP address comes from a DHCP server on the WAN. None - The MAX-207HW2R is not using any DHCP services in the WAN.
  • Page 41 This field indicates whether or not the MAX-207HW2R is using the interface. For the WAN interface, this field displays Up when the MAX-207HW2R is connected to a WiMAX network, and Down when the MAX-207HW2R is not connected to a WiMAX network.
  • Page 42 Chapter 4 The Status Screen MAX-207HW2R User’s Guide...

  • Page 43: The Lan Configuration Screens

    The LAN Configuration Screens 5.1 Overview Use the ADVANCED > LAN Configuration screens to set up the MAX-207HW2R on the LAN. You can configure its IP address and subnet mask, DHCP services, and other subnets. You can also control how the MAX-207HW2R sends routing information using RIP.

  • Page 44: Dhcp Setup

    207HW2R an IP address, subnet mask, DNS and other routing information when it’s turned on. 5.2 DHCP Setup Click ADVANCED > LAN Configuration > DHCP Setup to enable, disable, and configure the DHCP server in the MAX-207HW2R. Figure 12 ADVANCED > LAN Configuration > DHCP Setup MAX-207HW2R User’s Guide...

  • Page 45: Static Dhcp

    DESCRIPTION DHCP Setup Enable DHCP Select this if you want the MAX-207HW2R to be the DHCP server on the Server LAN. As a DHCP server, the MAX-207HW2R assigns IP addresses to DHCP clients on the LAN and provides the subnet mask and DNS server information.
  • Page 46 Enter the MAC address of the computer to which you want the MAX- 207HW2R to assign the same IP address. IP Address Enter the IP address you want the MAX-207HW2R to assign to the computer. Apply Click to save your changes.

  • Page 47: Ip Alias

    IP Alias 1 IP Alias 1 Select this to add the specified subnet to the LAN port. IP Address Enter the IP address of the MAX-207HW2R on the subnet. IP Subnet Enter the subnet mask of the subnet. Mask Use this field to control how much routing information the MAX- Direction 207HW2R sends and receives on the subnet.
  • Page 48 Table 12 ADVANCED > LAN Configuration> IP Alias (continued) LABEL DESCRIPTION RIP Version Select which version of RIP the MAX-207HW2R uses when it sends or receives information on the subnet. • RIP-1 - The MAX-207HW2R uses RIPv1 to exchange routing information.

  • Page 49: Advanced

    Out Only - The MAX-207HW2R only sends routing information on the subnet. RIP Version Select which version of RIP the MAX-207HW2R uses when it sends or receives information on the subnet. • RIP-1 - The MAX-207HW2R uses RIPv1 to exchange routing information.

  • Page 50: Technical Reference

    You do not have to enable multicasting to use RIP-2M. (See RIP Version.) Select which version of IGMP the MAX-207HW2R uses to support multicasting on the LAN. Multicasting sends packets to some computers on the LAN and is an alternative to unicasting (sending packets to one computer) and broadcasting (sending packets to every computer).

  • Page 51: Dhcp Setup

    DHCP (Dynamic Host Configuration Protocol, RFC 2131 and RFC 2132) allows individual clients to obtain TCP/IP configuration at start-up from a server. You can configure the MAX-207HW2R as a DHCP server or disable it. When configured as a server, the MAX-207HW2R provides the TCP/IP configuration for the clients. If DHCP service is disabled, you must have another DHCP server on your LAN, or else each computer must be manually configured.

  • Page 52: Rip Setup

    • Both - the MAX-207HW2R will broadcast its routing table periodically and incorporate the RIP information that it receives. • In Only - the MAX-207HW2R will not send any RIP packets but will accept all RIP packets received. • Out Only - the MAX-207HW2R will send out RIP packets but will not accept any RIP packets received.

  • Page 53: Multicast

    IGMP. The address 224.0.0.2 is assigned to the multicast routers group. The MAX-207HW2R supports both IGMP version 1 (IGMP-v1) and IGMP version 2 (IGMP-v2). At start up, the MAX-207HW2R queries all directly connected networks to gather group membership. After that, the MAX-207HW2R periodically updates this information.
  • Page 54 Chapter 5 The LAN Configuration Screens MAX-207HW2R User’s Guide...

  • Page 55: The Wifi Configuration Screen

    The blue circle marks a wireless LAN in the following figure. Wireless clients (A and B) connect to an access point (AP) to access other devices (such as the printer) or the Internet. Your MAX-207HW2R works as an AP when you install a compatible WLAN card.

  • Page 56: What You Need To Know About Wifi

    WEP (Wired Equivalent Privacy) encrypts data transmitted between wired and wireless networks to keep the transmission private. Although one of the original wireless encryption protocols, WEP is also the weakest. Many people use it strictly to deter unintentional usage of their wireless network by outsiders. MAX-207HW2R User’s Guide...
  • Page 57 The IEEE 802.11b/g standard describes a simple authentication method between the wireless stations and AP. Three authentication types are defined: Auto, Open and Shared. The MAX-207HW2R supports the WEP (Open) and WEP (Shared) authentication types. • Open mode is implemented for ease-of-use and when security is not an issue.
  • Page 58 The MAC filter controls access to the wireless network. You can use the MAC address of each wireless client to allow or deny access to the wireless network. Finding Out More • See Section 6.5 on page 66 for advanced technical information on wireless networks. MAX-207HW2R User’s Guide...

  • Page 59: Before You Start

    6.2 General Screen Note: If you are configuring the MAX-207HW2R from a computer connected to the wireless LAN and you change the MAX-207HW2R’s SSID or security settings, you will lose your wireless connection when you press Apply to confirm. You must then change the wireless settings of your computer to match the MAX- 207HW2R’s new settings.

  • Page 60: No Security

    (AP) must have the same SSID. Enter a descriptive name (up to 32 printable 7-bit ASCII characters) for the wireless LAN. Note: If you are configuring the MAX-207HW2R from a computer connected to the wireless LAN and you change the MAX- 207HW2R’s SSID or WEP settings, you will lose your wireless...

  • Page 61: Wep Encryption

    Chapter 6 The WIFI Configuration Screen Note: If you do not enable any wireless security on your MAX-207HW2R, your network is accessible to any wireless networking device that is within range. Figure 18 Advanced > WIFI Configuration > General: No Security 6.2.2 WEP Encryption...

  • Page 62: Wpa(2)-Psk

    Mode WEP Key The WEP key is used to encrypt data. Both the MAX-207HW2R and the wireless stations must use the same WEP key for data transmission. If you want to manually set the WEP key, enter any 5 or 13 characters (ASCII string) or 10 or 26 hexadecimal characters ("0-9", "A-F") for a 64-...

  • Page 63: Wireless Lan Advanced Setup

    MAX-207HW2R. Select 802.11G only to allow only IEEE 802.11g compliant WLAN devices to associate with the MAX-207HW2R. Apply Click Apply to save your changes back to the MAX-207HW2R. Reset Click to restore your previously saved settings. Back Click this to return to the previous screen without saving changes.

  • Page 64: Mac Filter

    Chapter 6 The WIFI Configuration Screen 6.3 MAC Filter Use this screen to change your MAX-207HW2R’s MAC filter settings. Click Advanced > WIFI Configuration > MAC Filter. The screen appears as shown. Figure 22 Advanced > WIFI Configuration > MAC Filter The following table describes the labels in this screen.

  • Page 65: Wps

    Push Button Click this to add another WPS-enabled wireless device (within wireless range of the MAX-207HW2R) to your wireless network. This button may either be a physical button on the outside of device, or a menu button similar to the Push Button on this screen.

  • Page 66: Wireless Lan Technical Reference

    Normally, the MAX-207HW2R acts like a beacon and regularly broadcasts the SSID in the area. You can hide the SSID instead, in which case the MAX-207HW2R does not broadcast the SSID. In addition, you should change the default SSID to something that is difficult to guess.

  • Page 67: User Authentication

    User’s Guide or other documentation. You can use the MAC address filter to tell the MAX-207HW2R which devices are allowed or not allowed to use the wireless network. If a device is allowed to use the wireless network, it still has to have the correct information (SSID, channel, and security).

  • Page 68: Wifi Protected Setup

    Usually, you should set up the strongest encryption that every device in the wireless network supports. For example, suppose you have a wireless network with the MAX-207HW2R and you do not have a RADIUS server. Therefore, there is no authentication. Suppose the wireless network has two devices. Device A only supports WEP, and device B supports WEP and WPA.

  • Page 69: Push Button Configuration

    Look for a WPS button on each device. If the device does not have one, log into its configuration utility and locate the button (see the device’s User’s Guide for how to do this). The MAX-207HW2R’s WPS button is in the rear panel as shown next. Figure 24 The WPS Button on the MAX-207HW2R Press the button on one of the devices (it doesn’t matter which).
  • Page 70 Chapter 6 The WIFI Configuration Screen If you need to make sure that WPS worked, check the list of associated wireless clients in the AP’s configuration utility. If you see the wireless client in the list, WPS was successful. MAX-207HW2R User’s Guide...

  • Page 71: The Wan Configuration Screens

    • The WiMAX FC Table screen (Section 7.4 on page 80) lets you view BS information previously scanned by your MAX-207HW2R. 7.1.2 What You Need to Know The following terms and concepts may help as you read through this chapter.
  • Page 72 A base station provides network access to subscriber stations and mobile stations, and communicates with other base stations. The radio frequency and bandwidth of the link between the MAX-207HW2R and the base station are controlled by the base station. The MAX-207HW2R follows the base station’s configuration. Authentication...

  • Page 73: Internet Connection

    EAP secured connection between the mobile station, the base station and the AAA server. See the WiMAX security appendix for more details. 7.2 Internet Connection Click ADVANCED > WAN Configuration to set up your MAX-207HW2R’s Internet settings. Figure 28 ADVANCED > WAN Configuration > Internet Connection The following table describes the labels in this screen.
  • Page 74 This field displays the Privacy Key Management version number. PKM provides security between the MAX-207HW2R and the base station. At the time of writing, the MAX-207HW2R supports PKMv2 only. See the WiMAX security appendix for more information. Authentication This field displays the user authentication method.

  • Page 75: Wimax Configuration

    MAX-207HW2R. In a WiMAX network, a mobile or subscriber station must use a radio frequency supported by the base station to communicate. When the MAX-207HW2R looks for a connection to a base station, it can search a range of frequencies.
  • Page 76 These fields are the downlink frequency settings and bandwidth in Bandwidth kilohertz (kHz). Enter values in these fields to have the MAX- 207HW2R scan these frequencies for available channels in ascending numerical order. Contact your service provider for details of supported frequencies. RF Channel Plan MAX-207HW2R User’s Guide...
  • Page 77 MAX-207HW2R to scan for available channels In the Next Step Frequency field, enter the value of the frequency to scan each time that the MAX-207HW2R searches for a connection. Contact your service provider for the bandwidth value and the supported frequencies.

  • Page 78: Frequency Ranges

    7.3.2 Configuring Frequency Settings You need to set the MAX-207HW2R to scan one or more specific radio frequencies to find an available connection to a WiMAX base station. Use the WiMAX Configuration screen to define the radio frequencies to be searched for available wireless connections.
  • Page 79 • The MAX-207HW2R searches the DL Frequency settings in ascending numerical order, from [1] to [10]. • If you enter a 0 in a DL Frequency field, the MAX-207HW2R immediately moves on to the next DL Frequency field. • When the MAX-207HW2R connects to a base station, the values in this screen are automatically set to the base station’s frequency.

  • Page 80: Wimax Fc Table

    Chapter 7 The WAN Configuration Screens 7.4 WiMAX FC Table The MAX-207HW2R connects to a WiMAX base station (BS) for Internet access. The WiMAX FC (Frequency Counter) Table screen is a read-only screen that shows a list of the base stations information recently scanned by the MAX-207HW2R.
  • Page 81 This value is an indication of overall radio signal quality. A higher value indicates a higher signal quality, and a lower value indicates a lower signal quality. Apply Click to save your changes. Reset Click to restore your previously saved settings. MAX-207HW2R User’s Guide...
  • Page 82 Chapter 7 The WAN Configuration Screens MAX-207HW2R User’s Guide...

  • Page 83: The Port Configuration Screens

    NAT and firewall rules. • The Port Forwarding screen (Section 8.3 on page 85) lets you look at the current port-forwarding rules in the MAX-207HW2R, and to enable, disable, activate, and deactivate each one. MAX-207HW2R User’s Guide...

  • Page 84: General

    Each NAT session establishes a corresponding firewall session. Use this field to limit the number of NAT/firewall sessions each client computer can establish through the MAX-207HW2R. If your network has a small number of clients using peer to peer applications, you can raise this number to ensure that their performance is not degraded by the number of NAT sessions they can establish.

  • Page 85: Port Forwarding

    Internet. Figure 33 Multiple Servers Behind NAT Example 8.3.1 Port Forwarding Options Click ADVANCED > NAT Configuration > Port Forwarding to look at the current port-forwarding rules in the MAX-207HW2R, and to enable, disable, MAX-207HW2R User’s Guide...
  • Page 86 Default Server Setup Default Server Enter the IP address of the server to which the MAX-207HW2R should forward packets for ports that are not specified in the Port Forwarding section below or in the TOOLS > Remote MGMT screens. Enter 0.0.0.0 if you want the MAX-207HW2R to discard these packets instead.

  • Page 87: Port Forwarding Rule Setup

    Select this to enable this rule. Clear this to disable this rule. Service Name Enter a name to identify this rule. You can use 1 - 31 printable ASCII characters, or you can leave this field blank. It does not have to be a unique name. MAX-207HW2R User’s Guide...
  • Page 88 Enter the IP address of the server to which to forward packets for the Address selected port number(s). This server is usually on the LAN. Apply Click to save your changes. Cancel Click to return to the previous screen without saving your changes. MAX-207HW2R User’s Guide...

  • Page 89: The System Configuration Screens

    • In Windows XP: Click Start > My Computer > View system information and then click the Computer Name tab. Note the entry in the Full computer name field and enter it as the MAX-207HW2R System Name. MAX-207HW2R User’s Guide...

  • Page 90: Dynamic Dns

    204.217.0.2. The DNS server is extremely important because without it, you must know the IP address of a computer before you can access it. The MAX-207HW2R can get the DNS server addresses in the following ways: The ISP tells you the DNS server addresses, usually in the form of an information sheet, when you sign up.
  • Page 91 URL that you can specify while you are off line. Check with your custom DNS) Dynamic DNS service provider. IP Address Update Policy Use WAN IP Select this if you want the MAX-207HW2R to update the domain name Address with the WAN port's IP address. MAX-207HW2R User’s Guide...

  • Page 92: Firmware

    9.3 Firmware Click ADVANCED > System Configuration > Firmware to upload new firmware to the MAX-207HW2R. Firmware files usually use the system model name with a "*.bin" extension, such as "MAX-207HW2R.bin". The upload process uses HTTP (Hypertext Transfer Protocol) and may take up to two minutes. After a successful upload, the system will reboot.

  • Page 93: The Firmware Upload Process

    9.4 Configuration Click ADVANCED > System Configuration > Configuration to back up or restore the configuration of the MAX-207HW2R. You can also use this screen to reset the MAX-207HW2R to the factory default settings. Figure 38 ADVANCED > System Configuration > Configuration...

  • Page 94: The Restore Configuration Process

    DESCRIPTION Backup Configuration Backup Click this to save the MAX-207HW2R’s current configuration to a file on your computer. Once your device is configured and functioning properly, it is highly recommended that you back up your configuration file before making configuration changes. The backup configuration file is useful if you need to return to your previous settings.

  • Page 95: Restart

    Click this button to have the device perform a software restart. The Power LED blinks as it restarts and the shines steadily if the restart is successful. Note: Wait one minute before logging back into the MAX-207HW2R after a restart. 9.5.1 The Restart Process When you click Restart, the the process usually takes about two minutes.
  • Page 96 Chapter 9 The System Configuration Screens MAX-207HW2R User’s Guide...

  • Page 97: The Service Configuration Screens

    10.1.1 What You Can Do in This Chapter • The SIP Setting screen (Section 10.2 on page 99) lets you setup and maintain your SIP account(s) in the MAX-207HW2R. • The Advanced SIP Settings screen (Section 10.2.1 on page 100) lets you set up and maintain advanced settings for each SIP account 10.1.2 What You Need to Know...
  • Page 98 If you know the NAT router’s public IP address and SIP port number, you can use the Use NAT feature to manually configure the MAX-207HW2R to use a them in the SIP messages. This eliminates the need for STUN or a SIP ALG. You must also configure the NAT router to forward traffic with this port number to the MAX- 207HW2R.

  • Page 99: Before You Begin

    Select the SIP account you want to see in this screen. If you change this field, the screen automatically refreshes. SIP Settings Active SIP Select this if you want the MAX-207HW2R to use this account. Clear it if Account you do not want the MAX-207HW2R to use this account. Phone Enter your SIP number.

  • Page 100: Advanced Sip Settings

    This section describes the features of the Advanced SIP settings screen. 10.2.1.1 Voice Coding A codec (coder/decoder) codes analog voice signals into digital signals and decodes the digital signals back into voice signals. The MAX-207HW2R supports the following codecs. MAX-207HW2R User’s Guide...
  • Page 101 Enable Message Waiting Indication (MWI) enables your phone to give you a message–waiting (beeping) dial tone when you have one or more voice messages. Your VoIP service provider must have a messaging system that sends message- waiting-status SIP packets as defined in RFC 3842. MAX-207HW2R User’s Guide...
  • Page 102 DESCRIPTION SIP Server Settings URL Type Select whether or not to include the SIP service domain name when the MAX-207HW2R sends the SIP number. • SIP - include the SIP service domain name • TEL - do not include the SIP service domain name...
  • Page 103 Enter the minimum number of seconds the MAX-207HW2R accepts for a session expiration time when it receives a request to start a SIP session. If the request has a shorter time, the MAX-207HW2R rejects it. RTP Port Range Start Port Enter the listening port number(s) for RTP traffic, if your VoIP service provider gave you this information.
  • Page 104 The peer devices must also use G.711. T.38 Fax Relay Select this if the MAX-207HW2R should send fax messages as UDP or TCP/IP packets through IP networks. This provides better quality, but it may have inter-operability problems. The peer devices must also use T.38.
  • Page 105 10.2.1.4 Custom Tones (IVR) IVR (Interactive Voice Response) is a feature that allows you to use your telephone to interact with the MAX-207HW2R. The MAX-207HW2R allows you to record custom tones for the Early Media and Music On Hold functions. The same recordings apply to both the caller ringing and on hold tones.

  • Page 106: Technical Reference

    A then sends an ACK message to acknowledge that B has answered the call. Now A and B exchange voice media (talk). After talking, A hangs up and sends a BYE request. B replies with an OK response confirming receipt of the BYE request and the call is terminated. MAX-207HW2R User’s Guide...

  • Page 107: Sip Client Server

    In the following example, you want to use client device A to call someone who is using client device C. The client device (A in the figure) sends a call invitation to the SIP proxy server (B). MAX-207HW2R User’s Guide...

  • Page 108: Sip Redirect Server

    In the following example, you want to use client device A to call someone who is using client device C. Client device A sends a call invitation for C to the SIP redirect server (B). The SIP redirect server sends the invitation back to A with C’s IP address (or domain name). MAX-207HW2R User’s Guide...

  • Page 109: Nat And Sip

    10.3.6 NAT and SIP The MAX-207HW2R must register its public IP address with a SIP register server. If there is a NAT router between the MAX-207HW2R and the SIP register server, the MAX-207HW2R probably has a private IP address. The MAX-207HW2R lists its IP address in the SIP message that it sends to the SIP register server.

  • Page 110: Dscp And Per-Hop Behavior

    DiffServ network. Based on the marking rule, different kinds of traffic can be marked for different priorities of forwarding. Resources can then be allocated according to the DSCP values and the configured policies. MAX-207HW2R User’s Guide...

  • Page 111: The Phone Screens

    11.1 Overview Use the VOICE > Phone screens to configure the volume, echo cancellation, VAD settings and custom tones for the phone port on the MAX-207HW2R. You can also select which SIP account to use for making outgoing calls. 11.1.1 What You Can Do in This Chapter •...

  • Page 112: Analog Phone

    • CLIP (Calling Line Identification Presentation) • CLIR (Calling Line Identification Restriction) Note: To take full advantage of the supplementary phone services available though the MAX-207HW2R's phone port, you may need to subscribe to the services from your VoIP service provider. 11.2 Analog Phone Click VOICE >...

  • Page 113: Advanced Analog Phone Setup

    Outgoing Call Use SIP1 Select this if you want this phone port to use the SIP1 account when it makes calls. If you select both SIP accounts, the MAX-207HW2R tries to use SIP2 first. SIP2 Select this if you want this phone port to use the SIP2 account when it makes calls.
  • Page 114 Dialing Setting First Digit Set the number of seconds for the MAX-207HW2R to wait for you to Timeout start dialing a number after you pick up the telephone receiver. If you...

  • Page 115: Common

    Dialing Interval Select in VOICE > Phone > Analog Phone. If you select this, dial the phone number, and then press the pound key if you do not want to wait. The MAX-207HW2R makes the call immediately. Flash Timer...

  • Page 116: Region

    The following table describes the labels in this screen. Table 43 VOICE > Phone > Region LABEL DESCRIPTION Region Settings Select the place in which the MAX-207HW2R is located. Do not select Default. Call Service Select the mode for supplementary phone services (call hold, call Mode waiting, call transfer and three-way conference calls) that your VoIP service provider supports.

  • Page 117: The Flash Key

    (press and immediately release) the hook by hand to achieve the same effect. However, using the flash key is preferred since the timing is much more precise. The MAX-207HW2R may interpret manual tapping as hanging up if the duration is too long You can invoke all the supplementary services by using the flash key.
  • Page 118 Hang up the phone to drop the connection. If you want to separate the activated three-way conference into two individual connections (one is on-line, the other is on hold), press the flash key and press “2”. MAX-207HW2R User’s Guide...

  • Page 119: Usa Type Supplementary Services

    When you hear the dial tone, dial “*98#” followed by the number to which you want to transfer the call. to operate the Intercom. After you hear the ring signal or the second party answers it, hang up the phone. MAX-207HW2R User’s Guide...
  • Page 120 Pressing the flash key again will recreate the three-way conversation. The next time you press the flash key, the second call is online and the first call is on hold. Hang up the phone to drop the connection. MAX-207HW2R User’s Guide...

  • Page 121: The Phone Book Screens

    In peer-to-peer calls, you call another VoIP device directly without going through a SIP server. In the MAX-207HW2R, you must set up a speed dial entry in the phone book in order to do this. Select Non-Proxy (Use IP or URL) in the Type column and enter the callee’s IP address or domain name.

  • Page 122: Call Forward Policy

    Active in Advanced Setup - Incoming Call Policy. Forward to Number Setup Unconditional Select this if you want the MAX-207HW2R to forward all incoming calls Forward to to the specified phone number, regardless of other rules in the Number Forward to Number section. Specify the phone number in the field on the right.
  • Page 123 This field is used by the No Answer Forward to Number feature and Waiting Time No Answer conditions below. Enter the number of seconds the MAX-207HW2R should wait for you to answer an incoming call before it considers the call is unanswered. Advanced Setup - Incoming Call Policy The number of the item in this list.

  • Page 124: Speed Dial

    Number Active This field indicates whether the rule is active or not. Original Phone This is the original phone number you want the MAX-207HW2R to call Number when you dial the speed-dial number. Name (or This is the name of the party associated with this speed-dial number.

  • Page 125: Speed Dial Setup

    Speed Dial Select the speed-dial number you want to use for this phone number. Number Original Phone Enter the original phone number you want the MAX-207HW2R to call Number when you dial the speed-dial number. Name (or Enter a name to identify the party you call when you dial the speed-dial Memo) number.
  • Page 126 In this case, enter the IP address or domain name of the SIP server or the other party in the field below. Apply Click to save your changes. Cancel Click to return to the previous screen without saving your changes. MAX-207HW2R User’s Guide...

  • Page 127: The Certificates Screens

    Use the TOOLS > Certificates screens to importmanage public key certificates on the MAX-207HW2R. The MAX-207HW2R can use public key certificates (also sometimes called “digital IDs”) to authenticate users. Certificates are based on public-private key pairs. A certificate contains the certificate owner’s identity and public key. Certificates provide a way to exchange public keys for use in authentication.

  • Page 128: My Certificates

    Type in the location of the file you want to upload in this field or click Browse to find it. You cannot import a certificate with the same name as a certificate that is already in the MAX-207HW2R. Browse Click to find the certificate file you want to upload.

  • Page 129: Trusted Cas

    Click TOOLS > Certificates > Trusted CAs to open the following screen. Follow the instructions in this screen to save a trusted certification authority’s certificate from a computer to the MAX-207HW2R. The MAX-207HW2R trusts any valid certificate signed by any of the imported trusted CA certificates.

  • Page 130: Certificate Authorities

    A certification path is the hierarchy of certification authority certificates that validate a certificate. The MAX-207HW2R does not trust a certificate if any certificate on its path has expired or been revoked.

  • Page 131: Advantages Of Certificates

    • Key distribution is simple and very secure since you can freely distribute public keys and you never need to transmit private keys. 13.4.1.2 Self-signed Certificates You can have the MAX-207HW2R act as a certification authority and sign its own certificates. 13.4.1.3 Factory Default Certificate The MAX-207HW2R generates its own unique self-signed certificate when you first turn it on.

  • Page 132: Verifying A Certificate

    Chapter 13 The Certificates Screens 13.4.2 Verifying a Certificate Before you import a certificate into the MAX-207HW2R, you should verify that you have the correct certificate. This is especially true of trusted certificates since the MAX-207HW2R also trusts any valid certificate signed by any of the imported trusted certificates.
  • Page 133 Use a secure method to verify that the certificate owner has the same information in the Thumbprint Algorithm and Thumbprint fields. The secure method may very based on your situation. Possible examples would be over the telephone or through an HTTPS connection. MAX-207HW2R User’s Guide...
  • Page 134 Chapter 13 The Certificates Screens MAX-207HW2R User’s Guide...

  • Page 135: The Remote Management Screens

    MAX-207HW2R on each interface. Remote management allows you to determine which services/protocols can access which MAX-207HW2R interface (if any) from which computers. You may manage your MAX-207HW2R from a remote location via: Table 52 Remote Management •...

  • Page 136: What You Need To Know

    You have disabled that service in one of the remote management screens. The IP address in the Secured Client IP field does not match the client IP address. If it does not match, the MAX-207HW2R will disconnect the session immediately.

  • Page 137: Www

    Chapter 14 The Remote Management Screens TCP/IP protocol suite. Your MAX-207HW2R supports SNMP agent functionality, which allows a manager station to manage and monitor the MAX-207HW2R through the network. The MAX-207HW2R supports SNMP version one (SNMPv1) and version two (SNMPv2). The next figure illustrates an SNMP management operation.

  • Page 138: Telnet

    Select the interface(s) through which a computer may access the MAX- 207HW2R using this service. Secured Client Select All to allow any computer to access the MAX-207HW2R using IP Address this service. Select Selected to only allow the computer with the IP address that you specify to access the MAX-207HW2R using this service.

  • Page 139: Ftp

    Select the interface(s) through which a computer may access the MAX- 207HW2R using this service. Secured Client Select All to allow any computer to access the MAX-207HW2R using IP Address this service. Select Selected to only allow the computer with the IP address that you specify to access the MAX-207HW2R using this service.

  • Page 140: Snmp

    Information Base (MIB) is a collection of managed objects. SNMP allows a manager and agents to communicate for the purpose of accessing these objects. The MAX-207HW2R supports MIB II that is defined in RFC-1213 and RFC-1215. The focus of the MIBs is to let administrators collect statistical data and monitor status and performance.

  • Page 141: Snmp Traps

    • Set - Allows the manager to set values for object variables within an agent. • Trap - Used by the agent to inform the manager of some events. 14.5.1 SNMP Traps The MAX-207HW2R sends traps to the SNMP manager when any of the following events occurs: Table 56 SNMP Traps...

  • Page 142: Snmp Options

    A secured client is a “trusted” computer that is allowed to Address communicate with the MAX-207HW2R using this service. Select All to allow any computer to access the MAX-207HW2R using this service. Choose Selected to just allow the computer with the IP address that you specify to access the MAX-207HW2R using this service.

  • Page 143: Dns

    DESCRIPTION Server Port This field is read-only. This field displays the port number this service uses to access the MAX-207HW2R. The computer must use the same port number. Server Access Select the interface(s) through which a computer may access the MAX- 207HW2R using this service.

  • Page 144: Ping

    Chapter 14 The Remote Management Screens 14.7 Ping Click TOOLS > Remote MGMT > Ping to control how your MAX-207HW2R responds to other types of requests. Figure 63 TOOLS > Remote MGMT > Ping The following table describes the labels in this screen.

  • Page 145: The Firewall Screens

    The following terms and concepts may help as you read through this chapter. About the MAX-207HW2R Firewall The MAX-207HW2R firewall is a stateful inspection firewall and is designed to protect against Denial of Service attacks when activated. The MAX-207HW2R's purpose is to allow a private Local Area Network (LAN) to be securely connected to...

  • Page 146: Firewall Setting

    Chapter 15 The Firewall Screens the Internet. The MAX-207HW2R can be used to prevent theft, destruction and modification of data, as well as log events, which may be important to the security of your network. The MAX-207HW2R is installed between the LAN and a WiMAX base station connecting to the Internet.

  • Page 147: Triangle Route

    Chapter 15 The Firewall Screens LAN-to-LAN/MAX-207HW2R means the LAN to the MAX-207HW2R LAN interface. This is always allowed, as this is how you manage the MAX-207HW2R from your local computer. WAN-to-LAN rules are Internet to your local network firewall rules. The default is to block all traffic from the Internet to your local network.

  • Page 148: Firewall Setting Options

    LABEL DESCRIPTION Firwall Setup Enable Firewall Select this to activate the firewall. The MAX-207HW2R controls access and protects against Denial of Service (DoS) attacks when the firewall is activated. Bypass Triangle Select this if you want to let some traffic from the WAN go directly to a Route computer in the LAN without passing through the MAX-207HW2R.

  • Page 149: Services

    Table 61 TOOLS > Firewall > Service Setting LABEL DESCRIPTION Service Setup Enable Services Select this to activate service blocking. The Schedule to Block section Blocking controls what days and what times service blocking is actually effective, however. MAX-207HW2R User’s Guide...

  • Page 150: Schedule

    Select what time each day you want service blocking to be effective. Block Enter times in 24-hour format; for example, 3:00pm should be entered as 15:00. Apply Click to save your changes. Reset Click to restore your previously saved settings. MAX-207HW2R User’s Guide...

Table of Contents