Documentation Feedback Send your comments, questions or suggestions to: techwriters@zyxel.com.tw Thank you! The Technical Writing Team, ZyXEL Communications Corp., 6 Innovation Road II, Science-Based Industrial Park, Hsinchu, 30099, Taiwan. Need More Help? More help is available at www.zyxel.com.
Page 4
About This User's Guide • Download Library Search for the latest product updates and documentation from this link. Read the Tech Doc Overview to find out how to efficiently use the documentation in order to better understand how to use your product. •...
Document Conventions Document Conventions Warnings and Notes These are how warnings and notes are shown in this User’s Guide. Warnings tell you about things that could harm you or your MAX208M2W Series. Note: Notes tell you other important information (for example, other things you may need to configure or helpful tips) or recommendations.
Page 6
Document Conventions Icons Used in Figures Figures in this User’s Guide may use the following generic icons. The MAX208M2W Series icon is not an exact representation of your product. Table 1 Common Icons MAX208M2W Series Computer Wireless Signal Notebook Server Base Station Telephone Switch...
Safety Warnings Safety Warnings For your safety, be sure to read and follow all warning notices and instructions. • Do NOT use this product near water, for example, in a wet basement or near a swimming pool. • Do NOT expose your device to dampness, dust or corrosive liquids. •...
Page 8
Safety Warnings • Make sure that the cable system is grounded so as to provide some protection against voltage surges. Your product is marked with this symbol, which is known as the WEEE mark. WEEE stands for Waste Electronics and Electrical Equipment. It means that used electrical and electronic products should not be mixed with general waste.
Contents Overview Contents Overview User’s Guide ........................... 17 Getting Started ........................... 19 Introducing the Web Configurator ....................23 Setup Wizard ..........................29 Tutorials ............................. 41 Technical Reference ......................61 System Status ..........................63 WiMAX ............................67 Network Setting ......................... 89 Security ............................
Page 10
Contents Overview MAX208M2W Series User’s Guide...
Page 11
1.1.2 Make Calls via Internet Telephony Service Provider ..........20 1.2 MAX218M2W Hardware ...................... 21 1.2.1 LEDs .......................... 21 1.3 Good Habits for Managing the MAX218M2W ..............22 Chapter 2 Introducing the Web Configurator ..................23 2.1 Overview ..........................23 2.1.1 Accessing the Web Configurator ................
4.6 Configuring the MAC Address Filter ..................46 4.7 Setting Up NAT Port Forwarding ..................48 4.8 Access the MAX218M2W Using DDNS ................51 4.8.1 Registering a DDNS Account on www.dyndns.org ............ 51 4.8.2 Configuring DDNS on Your MAX218M2W ..............52 4.8.3 Testing the DDNS Setting ..................
Page 13
Table of Contents Chapter 7 Network Setting........................89 7.1 Overview ..........................89 7.1.1 What You Need to Know .................... 89 7.2 WAN ............................ 94 7.3 PPPoE ..........................96 7.4 GRE ............................. 98 7.5 EtherIP ..........................98 7.6 IP ............................99 7.7 DHCP ..........................
Page 14
Table of Contents 9.1.3 Before you Begin ...................... 135 9.2 Media ..........................135 9.2.1 QoS .......................... 136 9.2.2 QoS Settings ......................137 9.3 Technical Reference ......................137 9.3.1 DSCP and Per-Hop Behavior ................... 137 Chapter 10 The VoIP Account Screens ....................139 10.1 Overview ..........................
Page 15
13.1 Power, Hardware Connections, and LEDs ..............185 13.2 MAX218M2W Access and Login ..................186 13.3 Internet Access ........................ 188 13.4 Reset the MAX218M2W to Its Factory Defaults .............. 189 13.4.1 Pop-up Windows, JavaScript and Java Permissions ..........190 Chapter 14 Product Specifications ......................
Page 16
Table of Contents Index............................297 MAX208M2W Series User’s Guide...
Getting Started 1.1 About Your MAX208M2W Series The MAX208M2W Series includes MAX208M2W and MAX218M2W. The MAX208M2W Series has a built-in switch and two phone ports. It allows you to access the Internet by connecting to a WiMAX wireless network. You can use a traditional analog telephone to make Internet calls using the MAX208M2W Series’s...
Chapter 1 Getting Started Use content filtering to block access to web sites with URLs containing keywords that you specify. You can define time periods and days during which content filtering is enabled and include or exclude particular computers on your network from content filtering.
Chapter 1 Getting Started 1.2 MAX208M2W Series Hardware Follow the instructions in the Quick Start Guide to make hardware connections. 1.2.1 LEDs The following figure shows the LEDs (lights) on the MAX208M2W Series. Figure 4 The MAX208M2W Series’s LEDs POWER WIMAX LINK SIGNAL...
Chapter 1 Getting Started Table 2 The MAX208M2W Series LEDs behavior STATE DESCRIPTION WiMAX Link The MAX208M2W Series is not connected to a wireless (WiMAX) network. Green The MAX208M2W Series is successfully connected to a wireless (WiMAX) network. Green (Blinking The MAX208M2W Series is searching for a wireless Slowly) (WiMAX) network.
Page 23
Chapter 1 Getting Started • Back up the configuration (and make sure you know how to restore it). Restoring an earlier working configuration may be useful if the MAX208M2W Series becomes unstable or even crashes. If you forget your password, you will have to reset the MAX208M2W Series to its factory default settings.
Page 24
Chapter 1 Getting Started MAX208M2W Series User’s Guide...
H A P T E R Introducing the Web Configurator 2.1 Overview The Web Configurator is an HTML-based management interface that allows easy device set up and management via any web browser that supports: HTML 4.0, CSS 2.0, and JavaScript 1.5, and higher. The recommended screen resolution for using the web configurator is 1024 by 768 pixels and 16-bit color, or higher.
Chapter 2 Introducing the Web Configurator A login screen displays. Enter the default Username (admin) and Password (1234), then click Login. Figure 5 Login screen Note: For security reasons, the MAX208M2W Series automatically logs you out if you do not use the Web Configurator for five minutes. If this happens, log in again. 2.1.2 The Reset Button If you forget your password or cannot access the Web Configurator, you will need to use the Reset button to reload the factory-default configuration file.
Chapter 2 Introducing the Web Configurator 2.1.3 Saving and Canceling Changes All screens to which you can make configuration changes must be saved before those changes can go into effect. If you make a mistake while configuring the MAX208M2W Series, you can cancel those changes and start over. Figure 6 Saving and Canceling Changes This screen contains the following fields: Table 3 Saving and Canceling Changes...
Chapter 2 Introducing the Web Configurator Table 4 Saving and Canceling Changes (continued) LABEL DESCRIPTION Previous Page Click this to go to the previous page in the table. Page Indicator / Jump to Page This indicates which page is currently displayed in the table.
Page 29
Chapter 2 Introducing the Web Configurator Figure 8 Main Screen The following table describes the icons in this screen. Table 5 Main > Icons ICON DESCRIPTION System Status Click this to open the Main screen, which shows your MAX208M2W Series status and other information. WiMAX Click this to open the WiMAX menu, which gives you options for configuring your WiMAX settings.
Page 30
Chapter 2 Introducing the Web Configurator Table 5 Main > Icons (continued) ICON DESCRIPTION Maintenance Click this to open the Maintenance menu, which gives you options for maintaining your MAX208M2W Series and performing basic network connectivity tests. Language Use this menu to select the Web Configurator’s language. Setup Wizard Click this to open the Setup Wizard, where you can configure the most essential settings for your MAX208M2W Series to work.
H A P T E R Setup Wizard 3.1 Overview This chapter provides information on the ZyXEL Setup Wizard. The wizard guides you through several steps for onfiguring your network settings. 3.1.1 Welcome to the Setup Wizard This screen provides a quick summary of the configuration tasks the wizard helps you to perform.
Page 32
Chapter 3 Setup Wizard Set up your MAX208M2W Series’s WLAN so that other devices, such as a laptop or a smartphone, can connect wirelessly to the Internet using the MAX208M2W Series. Figure 9 Setup Wizard > Welcome MAX208M2W Series User’s Guide...
Chapter 3 Setup Wizard 3.1.2 LAN Settings The LAN Settings screen allows you to configure your local network options. Figure 10 Setup Wizard > LAN Settings The following table describes the labels in this screen. Table 6 Setup Wizard > LAN Settings LABEL DESCRIPTION LAN TCP/IP...
Chapter 3 Setup Wizard Table 6 Setup Wizard > LAN Settings (continued) LABEL DESCRIPTION Lease Enter the duration in minutes before the device requests a new IP address Time from the DHCP server. DNS Server assigned by DHCP Server First DNS Specify the first IP address of three DNS servers that the network can use.
Page 35
Chapter 3 Setup Wizard The following table describes the labels in this screen. Table 7 Setup Wizard > WiMAX Frequency Settings LABEL DESCRIPTION Setting Type Select the WiMAX frequency setting type from the list. • By Range - Select this to set up the frequency based on a range of MHz.
Chapter 3 Setup Wizard 3.1.4 WiMAX Authentication Settings The WiMAX Authentication Settings screen allows you to configure how your MAX208M2W Series logs into the service provider’s network. Note: These settings should be provided by your ISP. Note: The EAP supplicant settings on this screen vary depending on the authentication mode your select.
Page 37
Chapter 3 Setup Wizard The following table describes the labels in this screen. Table 8 Setup Wizard > WiMAX Authentication Settings LABEL DESCRIPTION Authentication Authenticati Select a WiMAX authentication mode for authentication network on Mode sessions with the ISP. Options are: •...
Chapter 3 Setup Wizard 3.1.5 VoIP Settings The VoIP Settings screen allows you to configure how your MAX208M2W Series connects to up to two VoIP service providers’ network and makes calls over the Internet. Note: This settings should be provided by your VoIP service provider. Figure 13 Setup Wizard >...
Chapter 3 Setup Wizard Table 9 Setup Wizard > VoIP Settings (continued) LABEL DESCRIPTION Subscriber Enter your SIP number. In the full SIP URI, this is the part before the @ Number symbol. Display Name Enter the name that appears on the other party’s device if they have Caller ID enabled.
Page 40
Chapter 3 Setup Wizard Figure 15 Steup Wizard > WLAN Settings > Encryption Type: WPA Personall The following table describes the labels in this screen. Table 10 Setup Wizard > WLAN Settings LABEL DESCRIPTION Wifi Settings Select this box to enable the wireless service and allow other Enable WLAN wireless clients to connect to the Internet using the MAX208M2W Series.
Chapter 3 Setup Wizard Table 10 Setup Wizard > WLAN Settings (continued) LABEL DESCRIPTION WPA Mode Select either WPA, WPA2 or Auto (WPA or WPA2). Cipher Type Select the type of authentication that you wish to use for your network: TKIP, AES or both.
Page 42
Chapter 3 Setup Wizard MAX208M2W Series User’s Guide...
Configuring the MAC Address Filter, see page 46 • Setting Up NAT Port Forwarding, see page 48 • Access the MAX218M2W Using DDNS, see page 51 • Configuring Static Route for Routing to Another Network, see page 52 • Remotely Managing Your MAX218M2W page 55 •...
Chapter 4 Tutorials Configure the MAX208M2W Series to connect securely to the ISP’s authentication servers. See Section 6.4 on page Check the MAX208M2W Series’s connection status to ensure everything is working properly. See Section 6.7 on page 4.3 Configuring LAN DHCP This tutorial shows you how to set up a small network in your office or home.
Page 45
Chapter 4 Tutorials Manually change the IP address of your computer that your are using to 192.168.100.x (for example, 192.168.100.5) and keep the subnet set to 255.255.255.0. Type http://192.168.100.1 in your browser after the MAX208M2W Series finishes starting up completely. Log into the Web Configurator and open the Networking Setting >...
Chapter 4 Tutorials Connect your computers to the MAX208M2W Series’s Ethernet ports and you’re all set! Note: You may need to configure the computers on your LAN to automatically obtain IP addresses. For information on how to do this, see Appendix B on page 207.
Chapter 4 Tutorials You may need to configure the Options section according to the information provided by the ISP. Click Save. You should now be able to connect to the Internet through your new service provider! 4.5 Blocking Web Access If your MAX208M2W Series is in a home or office environment you may decide that you want to block an Internet website access.
Chapter 4 Tutorials Click Save. Open a browser from your computer in the MAX208M2W Series’s LAN network, you should get an “Access Violation” message when you try to access to http:// www.example.com. You may also need to block the IP address of the website if you do not want users to access to the website through its IP address.
Page 49
Chapter 4 Tutorials First of all, you have to know the MAC address of the computer. If not, you can look for the MAC address in the Network Setting > LAN > DHCP screen. (192.168.100.3 mapping to 00:02:E3:53:16:95 in this example). Click Security >...
Chapter 4 Tutorials An empty entry appears. Enter the computer’s MAC address in the Source MAC field and leave the other fields set to their defaults. Click Save. The computer will no longer be able to access any host on the WiMAX network through the MAX208M2W Series.
Page 51
Chapter 4 Tutorials NAT mode is required to use port forwarding. Click Network Setting > WAN and make sure NAT is selected in the Operation Mode field. Click Save. Click Network Setting > NAT > Port Forwarding and then click the first entry to edit the rule.
Page 52
Chapter 4 Tutorials Repeat steps 2 and 3 to open the rest of the ports for the Xbox 360. The port forwarding settings you configured are listed in the Port Forwarding screen. Click Save. Thomas can then connect his Xbox 360 to the Internet and play online games with his friends.
To use this feature, you have to apply for DDNS service at www.dyndns.org. This tutorial covers: • Registering a DDNS Account on www.dyndns.org • Configuring DDNS on Your MAX218M2W • Testing the DDNS Setting Note: If you have a private WAN IP address (see Private IP Addresses on page 254), then you cannot use DDNS.
Chapter 4 Tutorials 4.8.2 Configuring DDNS on Your MAX208M2W Series Configure the following settings in the Network Setting > DDNS screen. Select Enable Dynamic DNS. Select dyndns.org for the service provider. Select Dynamic for the service type. Type mywimax.dyndns.org in the Domain Name field. Enter the user name (UserName1) and password (12345).
Page 55
Chapter 4 Tutorials In the following figure, router R is connected to the MAX208M2W Series’s LAN. R connects to two networks, N1 (192.168.1.x/24) and N2 (192.168.10.x/24). If you want to send traffic from computer A (in N1 network) to computer B (in N2 network), the traffic is sent to the MAX208M2W Series’s WAN default gateway by default.
Page 56
Chapter 4 Tutorials This tutorial uses the following example IP settings: Table 11 IP Settings in this Tutorial DEVICE / COMPUTER IP ADDRESS The MAX208M2W Series’s 172.16.1.1 The MAX208M2W Series’s LAN 192.168.1.1 192.168.1.34 R’s IP address on N1 192.168.1.253 R’s IP address on N2 192.168.10.2 192.168.10.33 To configure a static route to route traffic from N1 to N2:...
Chapter 4 Tutorials 4.10 Remotely Managing Your MAX208M2W Series The remote management feature allows you to log into the device through the Internet. Goal: Set up the MAX208M2W Series to allow management requests from the WAN (Internet). See Also: Section 12.3 on page 167.
Chapter 4 Tutorials 4.11 VLAN Configuration Example This example assumes that you want port 1 to recognize VLAN 100 and VLAN 200 traffic sent from/to computers A and B. Port 2 is dedicated for transmitting and receiving VLAN-untagged and management traffic. Figure 17 VLAN Configuration Example port 1 VLAN 100...
Page 59
Chapter 4 Tutorials Click Network Setting > VLAN and then click the PVID Group for port 2. Select MGMT from the drop-down list, click OK in the section, and then click Save at the bottom of the screen. MAX208M2W Series User’s Guide...
Page 60
Chapter 4 Tutorials Click Network Setting > WAN. Change the MAX208M2W Series to bridge mode and then click Save. The MAX208M2W Series will restart. Wait until it completely restarts. Configure the IP address of your computer to be in the same network as the MAX208M2W Series’s LAN.
Page 61
Chapter 4 Tutorials 12 Since by default port 1 is associated with VLAN rule 1. Click the VID field to configure the settings as shown next. Click OK and then Save. Finally, you complete the settings. See Section 7.19 on page 122 if you need more information about VLAN.
Page 62
Chapter 4 Tutorials MAX208M2W Series User’s Guide...
H A P T E R System Status 5.1 Overview Use this screen to view a summary of your MAX208M2W Series connection status. 5.2 System Status This screen allows you to view the current status of the device, system resources, and interfaces (LAN and WAN).
Page 66
Chapter 5 System Status The following tables describe the labels in this screen. Table 12 Status LABEL DESCRIPTION System Information System Model This field displays the MAX208M2W Series system model name. It is Name used for identification. Software This field displays the Web Configurator version number. Version Firmware This field displays the current version of the firmware inside the...
Page 67
Chapter 5 System Status Table 12 Status (continued) LABEL DESCRIPTION Connection This field displays the status of the WiMAXconnection between the Status MAX208M2W Series and the base station. Network Search - The MAX208M2W Series is scanning for any available WiMAX connections. Disconnected - No WiMAX connection is available.
Page 68
Chapter 5 System Status Table 12 Status (continued) LABEL DESCRIPTION Registered This field displays whether SIP account 2 is already registered with a Status SIP server (Registered or Unregistered). Line1 Status This field displays whether phone line 1 (mapping to the VoIP1 port) is in use or not (idle).
H A P T E R WiMAX 6.1 Overview This chapter shows you how to set up and manage the connection between the MAX208M2W Series and your ISP’s base stations. 6.1.1 What You Need to Know The following terms and concepts may help as you read through this chapter. WiMAX WiMAX (Worldwide Interoperability for Microwave Access) is the IEEE 802.16 wireless networking standard, which provides high-bandwidth, wide-range...
Page 70
Chapter 6 WiMAX WiMAX technology uses radio signals (around 2 to 10 GHz) to connect subscriber stations and mobile stations to local base stations. Numerous subscriber stations and mobile stations connect to the network through a single base station (BS), as in the following figure.
Page 71
Chapter 6 WiMAX Frequency Ranges The following figure shows the MAX208M2W Series searching a range of frequencies to find a connection to a base station. Figure 22 Frequency Ranges In this figure, A is the WiMAX frequency range. “WiMAX frequency range” refers to the entire range of frequencies the MAX208M2W Series is capable of using to transmit and receive (see the Product Specifications appendix for details).
Page 72
Chapter 6 WiMAX Certificate File Formats The certification authority certificate that you want to import has to be in one of these file formats: • Binary X.509: This is an ITU-T recommendation that defines the formats for X.509 certificates. • PEM (Base-64) encoded X.509: This Privacy Enhanced Mail format uses lowercase letters, uppercase letters and numerals to convert a binary X.509 certificate into a printable form.
Chapter 6 WiMAX 6.2 Connection Settings This screen allows you to configure how the MAX208M2W Series connects to the base stations on the WiMAX network. Click WiMAX > Profile > Connection Settings to open this screen as shown next. Figure 23 Connection Settings Screen This screen contains the following fields: Table 13 Connection Settings LABEL...
Page 74
Chapter 6 WiMAX Table 13 Connection Settings (continued) LABEL DESCRIPTION Idle Mode Set the idle duration in minutes. This is how long the MAX208M2W Interval Series waits during periods of no activity before going into idle mode. CINR & RSSI Set the refresh interval in milliseconds for calculating the signal-to- Refresh noise measurement (CINR) and signal strength measurement (RSSI) of...
Chapter 6 WiMAX 6.3 Frequency Settings Use this screen to have the WiMAX Device to scan one or more specific radio frequencies (given by your WiMAX service provider) to find available connections to base stations. Click WiMAX > Profile > Frequency Settings to open this screen as shown next.
Page 76
Chapter 6 WiMAX This screen contains the following fields: Table 14 Frequency Settings LABEL DESCRIPTION Setting Type Select whether to scan base stations by entering specific frequency(- ies) (By List) or a range of frequencies (By Range). Note: When you select By Range, you can only configure one range of frequencies in this screen.
Page 77
Chapter 6 WiMAX Table 14 Frequency Settings (continued) LABEL DESCRIPTION Click this button to save any changes made to the list. Valid Band Info (B) This table displays the entire frequency band the MAX208M2W Series supports. The frequenc(ies) to scan that you configured in table A must be within this range. Band Start This indicates the beginning of the frequency band in kilohertz (KHz).
Chapter 6 WiMAX 6.4 Authentication Settings These settings allow the WiMAX Device to establish a secure (authenticated) connection with the service provider. Click WiMAX > Profile > Authentication Settings to open this screen as shown next. Figure 26 Authentication Settings Screen MAX208M2W Series User’s Guide...
Page 79
Chapter 6 WiMAX This screen contains the following fields: Table 15 Authentication Settings LABEL DESCRIPTION Authentication Select the authentication mode from the list. Mode The MAX208M2W Series supports the following authentication modes: • No authentication • User authentication • Device authentication •...
Page 80
Chapter 6 WiMAX Table 15 Authentication Settings (continued) LABEL DESCRIPTION Device Browse for and choose a device private key, if required. Private Key Device This field displays information about the assigned device private key. Private Key Info Device Enter the device private key, if required. Private Key Password Inner Mode...
Chapter 6 WiMAX Table 15 Authentication Settings (continued) LABEL DESCRIPTION Delete Select this to delete an existing root certificate file from the existed Root MAX208M2W Series. Certificate file Delete Select this to delete an existing device certificate file from the existed MAX208M2W Series.
Page 82
Chapter 6 WiMAX This screen contains the following fields: Table 16 Connect LABEL DESCRIPTION Applied Frequency Information This table shows the scanning result you made in the WiMAX > Profile > Frequency Settings and WiMAX > Wide Scan screens. Note: You cannot see the wide scanning result that you made in WiMAX > Wide Scan screen if the Join Wide Scan Result is set to No in the WiMAX >...
Page 83
Chapter 6 WiMAX Table 16 Connect (continued) LABEL DESCRIPTION Device This field displays the MAX208M2W Series current status for connecting Status to the selected base station. Scanning - The MAX208M2W Series is scanning for available base stations. Ready - The MAX208M2W Series has finished scanning and you can connect to a base station.
Chapter 6 WiMAX 6.6 Wide Scan This screen allows you to discover base stations by entering one or more frequency ranges and bandwidth on which to scan. Click WiMAX > Wide Scan to open this screen as shown next. Figure 28 Wide Scan Screen This screen contains the following fields: Table 17 Wide Scan LABEL...
Chapter 6 WiMAX Table 17 Wide Scan (continued) LABEL DESCRIPTION Frequency This field displays the frequency in kilohertz (KHz). (KHz) Bandwidth This field displays the bandwidth in megahertz (MHz). (MHz) Search Click this to initiate a wide scan. Clear Click this to clear the wide scan results. 6.7 Link Status This screen provides a general overview of the current WiMAX connection with the service provider.
Page 86
Chapter 6 WiMAX Table 18 Link Status (continued) LABEL DESCRIPTION CINR R1 This field displays the average Carrier to Interference plus Noise Ratio (R1) for the current connection. This value is an indication of overal radio signal quality, where a higher value means a better quality signal. CINR Std Dev This field displays the average Carrier to Interference plus Noise Ratio (Std Dev) for the current connection.
Chapter 6 WiMAX 6.8 Link Statistics This screen provides a detailed overview of the current WiMAX connection with the service provider.. Click WiMAX > Link Statistics to open this screen as shown next. Figure 30 Link Statistics Screen This screen contains the following sections: Table 19 Link Statistics LABEL DESCRIPTION...
Chapter 6 WiMAX 6.9 Connection Info This screen displays all of the connections made through the WiMAX device since its last reboot. Click WiMAX > Connection Info to open this screen as shown next. Figure 31 Connection Info Screen This screen contains the following fields: Table 20 Connection Info LABEL DESCRIPTION...
Chapter 6 WiMAX 6.11 Antenna This option lets you choose which type of antenna you wish to use in the device: Internal or External. The device has both and switching between them might give you a better connection. Click WiMAX > Antenna to open this screen as shown next. Figure 33 Antenna Screen This screen contains the following fields: Table 22 Antenna...
Page 90
Chapter 6 WiMAX MAX208M2W Series User’s Guide...
H A P T E R Network Setting 7.1 Overview This chapter shows you how to configure the MAX208M2W Series’s network setting. 7.1.1 What You Need to Know The following terms and concepts may help as you read through this chapter. IP Address IP addresses identify individual devices on a network.
Page 92
Chapter 7 Network Setting DNS Server Address DNS (Domain Name System) is for mapping a domain name to its corresponding IP address and vice versa. The DNS server is extremely important because without it, you must know the IP address of a machine before you can access it. The DNS server addresses that you enter in the DHCP setup are passed to the client machines along with the assigned IP address and subnet mask.
Page 93
Chapter 7 Network Setting The Version field controls the format and the broadcasting method of the RIP packets that the MAX208M2W Series sends (it recognizes both formats when receiving). RIP-1 is universally supported; but RIP-2 carries more information. RIP-1 is probably adequate for most networks, unless you have an unusual network topology.
Page 94
Chapter 7 Network Setting Trigger Ports Some services use a dedicated range of ports on the client side and a dedicated range of ports on the server side. With regular port forwarding you set a forwarding port in NAT to forward a service (coming in from the server on the WAN) to the IP address of a computer on the client side (LAN).
Page 95
Chapter 7 Network Setting NAT Traversal UPnP NAT traversal automates the process of allowing an application to operate through NAT. UPnP network devices can automatically configure network addressing, announce their presence in the network to other UPnP devices and enable exchange of simple product and service descriptions. NAT traversal allows the following: •...
Chapter 7 Network Setting 7.2 WAN Use these settings to configure the WAN connection between the WiMAX Device and the service provider. Click Network Setting > WAN to open this screen as shown next. Figure 35 WAN Screen MAX208M2W Series User’s Guide...
Page 97
Chapter 7 Network Setting This screen contains the following fields: Table 23 WAN LABEL DESCRIPTION Operation Select the MAX208M2W Series’s operational mode. Mode • Bridge - This puts the MAX208M2W Series in bridge mode, acting as a transparent middle man between devices on the LAN and the devices on the WAN.
Chapter 7 Network Setting Table 23 WAN (continued) LABEL DESCRIPTION Clone MAC Enter a MAC address here for registering bridged devices on the Address network if their current MAC addresses are causing problems. For example, this can happen when a desktop computer swaps network interface cards;...
Page 99
Chapter 7 Network Setting This screen contains the following fields: Table 24 PPPoE LABEL DESCRIPTION User Name Enter the username for PPPoE login into the WAN network. Password Enter the password for PPPoE login into the WAN network. Retype Retype the password to confirm it. Password Auth Protocol Select a PPPoE authentication protocol.
Chapter 7 Network Setting 7.4 GRE Use these settings to configure the peer setting of the Generic Routing Encapsulation (GRE) tunnel between the WiMAX Device and another GRE peer. Click Network Setting > WAN > GRE to open this screen as shown next. Figure 37 GRE Screen This screen contains the following fields: Table 25 GRE...
Page 101
Chapter 7 Network Setting 7.6 IP Use these settings to configure the LAN connection between the WiMAX Device and your local network. Click Network Setting > LAN > IP to open this screen as shown next. Figure 39 IP Screen This screen contains the following fields: Table 27 IP LABEL...
Chapter 7 Network Setting 7.7 DHCP Use these settings to configure whether the WiMAX Device functions as a DHCP server for your local network, or a DHCP relay between the local network and the service provider. You can also disable the DHCP functions. Click Network Setting >...
Page 103
Chapter 7 Network Setting Table 28 DHCP (continued) LABEL DESCRIPTION Start IP Enter the start IP address from which the MAX208M2W Series begins allocating IP addresses. End IP Enter the end IP address at which the MAX208M2W Series ceases allocating IP addresses. Lease Time Enter the duration in minutes that devices on the LAN retain their DHCP-issued IP addresses.
Chapter 7 Network Setting 7.8 WLAN Use this screen to configure the connections between the MAX208M2W Series and the wireless clients that want to access the Internet. Click Network Setting > WLAN to open this screen as shown next. Figure 41 WLAN Screen This screen contains the following fields: Table 29 Network Setting >...
Page 105
Chapter 7 Network Setting Table 29 Network Setting > WLAN LABEL DESCRIPTION Enter the maximum number of wireless stations that is allowed to WLAN Maximum associate with the MAX208M2W Series. STA number WLAN TxPower Select a number between 1 and 24 dB in the drop down box to control the strength of the connection signal, or leave it as default to let the MAX208M2W Series control this feature.
Chapter 7 Network Setting 7.9 WPS Use this screen to configure WiFi Protected Setup (WPS) on your MAX208M2W Series. WPS allows you to quickly set up a wireless network with strong security without having to configure security settings manually. Set up each WPS connection between two devices.
Page 107
Chapter 7 Network Setting Click on Network Setting > WLAN > MAC Address Filter. The screen appears as shown. Figure 43 MAC Address Filter Screen This screen contains the following fields: Table 31 MAC Address Filter LABEL DESCRIPTION Enable MAC Select the check box to enable MAC address filtering.
Chapter 7 Network Setting 7.11 Static Route Use these settings to create fixed paths through the network. Click Network Setting > Route > Static Route to open this screen as shown next. Figure 44 Static Route Screen This screen contains the following fields: Table 32 Static Route LABEL DESCRIPTION...
Chapter 7 Network Setting This screen contains the following fields: Table 33 Static Route LABEL DESCRIPTION Destination IP Enter the destination IP address of the static route. Subnet Mask Enter the subnet mask of the static route. Next Hop Select Interface and then select WAN or LAN for the next hop of the static route.
Chapter 7 Network Setting This screen contains the following fields: Table 34 RIP LABEL DESCRIPTION General Setup Enable Select this to enable RIP on the MAX208M2W Series. Redistribute Active This indicates whether a route is being redistributed. Type This indicates what type of route is being redistributed. Metric This indicates the metric that is being used for redistribution.
Page 111
Chapter 7 Network Setting Click Network Setting > NAT > Port Forwarding to open this screen as shown next. Figure 47 Port Forwarding Screen This screen contains the following fields: Table 35 Port Forwarding LABEL DESCRIPTION Active This indicates whether the port forwarding rule is active or not. Name The displays the name of the port forwarding rule.
Chapter 7 Network Setting 7.14.1 Port Forwarding Wizard Use this wizard to set up a port forwarding rule for incoming service requests to the ports on your local network. Click Network Setting > NAT > Port Forwarding > Wizard to open this screen as shown next.
Chapter 7 Network Setting 7.15 Port Trigger Use these settings to automate port forwarding and allow computers on local network to provide services that would normally require a fixed address on the local network. Click Network Setting > NAT > Port Trigger to open this screen as shown next.
Chapter 7 Network Setting Table 37 Port Trigger (continued) LABEL DESCRIPTION Start / End This displays the start / end open port for the port trigger rule. Port Click Add to create a new, empty rule, then enter the outgoing port number or range of port numbers that makes the MAX208M2W Series record the source IP address and assign it to the selected incoming port number(s).
Chapter 7 Network Setting This screen contains the following fields: Table 38 Port Trigger Wizard LABEL DESCRIPTION Active Select this to make this port trigger rule active. Port Trigger Select the type of port trigger rule. Rule Rule Name Enter a name for the port trigger rule. Trigger Protocol Select the type of port trigger protocol.
Chapter 7 Network Setting Only Jane can connect to the Real Audio server until the connection is closed or times out. The MAX208M2W Series times out in three minutes with UDP (User Datagram Protocol), or two hours with TCP/IP (Transfer Control Protocol/Internet Protocol).
Chapter 7 Network Setting 7.17 ALG Use these settings to bypass NAT on your WiMAX Device for those applications that are "NAT un-friendly". Click Network Setting > NAT > ALG to open this screen as shown next. Figure 53 ALG Screen This screen contains the following fields: Network Setting >...
Chapter 7 Network Setting 7.18 UPnP Use this page to enable the UPnP networking protocol on your WiMAX Device and allow easy network connectivity with other UPnP-compatible devices. Click Network Setting > UPnP to open this screen as shown next. Figure 54 UPnP Screen This screen contains the following fields: Table 41 UPnP...
Page 119
Chapter 7 Network Setting The Windows Optional Networking Components Wizard window displays. Select Networking Service in the Components selection box and click Details. In the Networking Services window, select the Universal Plug and Play check box. Click OK to go back to the Windows Optional Networking Component Wizard window and click Next.
Page 120
Chapter 7 Network Setting 7.18.1.1 Auto-discover Your UPnP-enabled Network Device in Windows XP This section shows you how to use the UPnP feature in Windows XP. You must already have UPnP installed in Windows XP and UPnP activated on the MAX208M2W Series.
Page 121
Chapter 7 Network Setting In the Internet Connection Properties window, click Settings to see the port mappings there were automatically created. You may edit or delete the port mappings or click Add to manually add port mappings. When the UPnP-enabled device is disconnected from your computer, all port mappings will be deleted automatically.
Chapter 7 Network Setting Select Show icon in notification area when connected option and click OK. An icon displays in the system tray. Double-click on the icon to display your current Internet connection status. 7.18.2 Web Configurator Easy Access With UPnP, you can access the web-based configurator on the MAX208M2W Series without finding out the IP address of the MAX208M2W Series first.
Page 123
Chapter 7 Network Setting Select My Network Places under Other Places. An icon with the description for each UPnP-enabled device displays under Local Network. Right-click on the icon for your MAX208M2W Series and select Invoke. The web configurator login screen displays. MAX208M2W Series User’s Guide...
Chapter 7 Network Setting Right-click on the icon for your MAX208M2W Series and select Properties. A properties window displays with basic information about the MAX208M2W Series. 7.19 VLAN Use this screen to configure port-based VLAN settings on the MAX208M2W Series. This screen allows you to assign port(s) to specific virtual LAN(s) in order to isolate traffic from different VLAN groups.
Page 125
Chapter 7 Network Setting Click Network Setting > VLAN to open the screen as shown next. Figure 55 VLAN Screen This screen contains the following fields: Table 42 VLAN LABEL DESCRIPTION Management VLAN VLAN ID Enter an ID number (1~4094) to create a new VLAN. Enter 0 to disable VLAN on the MAX208M2W Series.
Page 126
Chapter 7 Network Setting Table 42 VLAN LABEL DESCRIPTION This field displays whether to prioritize traffic transmitted by the port, tagged or untagged. Click this field to change the setting. Set this to untagged if you do not want to prioritize outgoing traffic through the port.
Chapter 7 Network Setting 7.20 DDNS Use this page to configure the WiMAX Device as a dynamic DNS client. Click Network Setting > DDNS Figure 56 DDNS Screen This screen contains the following fields: Table 43 DDNS LABEL DESCRIPTION Enable Dynamic Select this to enable dynamic DNS on the MAX208M2W Series.
Chapter 7 Network Setting Table 43 DDNS (continued) LABEL DESCRIPTION Backup MX Select this to enable a secondary mail routing, if supported by the specified DYNDNS service provider. MX Host Enter the host to which mail is routed when the MX option is selected. 7.21 Content Filter Use these settings to allow ("whitelist") or block ("blacklist") connections to and from specific web sites through the WiMAX Device.
H A P T E R Security 8.1 Overview This chapter shows you how to configure the MAX208M2W Series’s network settings. 8.1.1 What You Need to Know The following terms and concepts may help as you read through this chapter. About the MAX208M2W Series’s Security Features The MAX208M2W Series security features are designed to protect against Denial of Service attacks when activated as well as block access to and from specific...
Chapter 8 Security 8.2 IP Filter Use this screen to block incoming connections from specific IP addresses. Click Security > Firewall > IP Filter to open this screen as shown next. Figure 58 IP Filter Screen This screen contains the following fields: Table 45 IP Filter LABEL DESCRIPTION...
Chapter 8 Security 8.3 MAC Filter Use this screen to allow ("whitelist") or block ("blacklist") connections to and from specific devices on the network based on their unique MAC addresses. Note: This feature only works when the MAX208M2W Series is in bridge mode. Click Security >...
Chapter 8 Security 8.4 DDOS Use these settings to potentially block specific types of Denial of Service attacks directed at your WiMAX Device. Click Security > Firewall > DDOS to open this screen as shown next. Figure 60 DDOS Screen This screen contains the following fields: Table 47 DDOS LABEL...
Page 133
Chapter 8 Security Table 47 DDOS (continued) LABEL DESCRIPTION Prevent from IP Select this to monitor for and block IP address spoof attacks. Spoof An IP address spoof is an attack whereby the source IP address in the incoming IP packets allows a malicious party to masquerade as a legitimate user and gain access to the client device.
Page 134
Chapter 8 Security MAX208M2W Series User’s Guide...
H A P T E R The VoIP General Screens 9.1 VoIP Overview The VOICE > General screens allow you to set up global SIP and Quality of Service (QoS) settings. VoIP (Voice over IP) is the sending of voice signals over the Internet Protocol. This allows you to make phone calls and send faxes over the Internet at a fraction of the cost of using the traditional circuit-switched telephone network.
Page 136
Chapter 9 The VoIP General Screens • G.711 is a Pulse Code Modulation (PCM) waveform codec. PCM measures analog signal amplitudes at regular time intervals (sampling) and converts them into digital bits (quantization). Quantization “reads” the analog signal and then “writes”...
Chapter 9 The VoIP General Screens multimedia sessions over the Internet. SIP signaling is separate from the media for which it handles sessions. The media that is exchanged during the session can use a different path from that of the signaling. SIP handles telephone calls and can interface with traditional circuit-switched telephone networks.
Chapter 9 The VoIP General Screens The following table describes the labels in this screen. Table 48 VoIP > General > Media LABEL DESCRIPTION Port Range Media Port Start Enter the listening port number(s) for RTP traffic on the MAX208M2W Series, if your VoIP service provider gave you this information.
Chapter 9 The VoIP General Screens 9.2.2 QoS Settings Click VoIP > General > QoS to set up Type of Service (ToS) and Differentiated Services (Diffserv) settings for voice traffic transmission through the MAX208M2W Series. Figure 62 VoIP > General > QoS The following table describes the labels in this screen.
Page 140
Chapter 9 The VoIP General Screens The DSCP value determines the forwarding behavior, the PHB (Per-Hop Behavior), that each packet gets across the DiffServ network. Based on the marking rule, different kinds of traffic can be marked for different priorities of forwarding. Resources can then be allocated according to the DSCP values and the configured policies.
H A P T E R The VoIP Account Screens 10.1 Overview Use the VoIP > Account 1 and VoIP > Account 2 screens to configure SIP servers, authentication, additional VoIP features, dialing timeout values, speed- dial rules and how to handle fax messages for two accounts on the MAX208M2W Series.
Chapter 10 The VoIP Account Screens SIP Identities A SIP account uses an identity (sometimes referred to as a SIP address). A complete SIP identity is called a SIP URI (Uniform Resource Identifier). A SIP account's URI identifies the SIP account in a way similar to the way an e-mail address identifies an e-mail account.
Chapter 10 The VoIP Account Screens In the following example, you want to use client device A to call someone who is using client device C. The client device (A in the figure) sends a call invitation to the SIP proxy server (B).
Page 144
Chapter 10 The VoIP Account Screens The MAX208M2W Series uses the public IP address and port number in the SIP packets that it sends to the SIP server (C). Figure 66 STUN Outbound Proxy Your VoIP service provider may host a SIP outbound proxy server to handle all of the MAX208M2W Series’s VoIP traffic.
Page 145
Chapter 10 The VoIP Account Screens In peer-to-peer calls, you call another VoIP device directly without going through a SIP server. Enter the callee’s IP address or domain name. The MAX208M2W Series sends SIP INVITE requests to the peer VoIP device when you use the speed dial entry.
Chapter 10 The VoIP Account Screens 10.2 Status Click VoIP > Account 1 (or Account 2) > Status to view VoIP settings and current status. Figure 67 VoIP > Account 1 (or Account 2) > Status The following table describes the labels in this screen. Table 50 VoIP >...
Page 147
Chapter 10 The VoIP Account Screens Table 50 VoIP > Account 1 (or Account 2) > Status LABEL DESCRIPTION STUN Server This field displays the IP address and service port number of the STUN (Simple Traversal of UDP through NATs (Network Address Translation)) server, if you have configured one.
Chapter 10 The VoIP Account Screens 10.3 Server Click VoIP > Account 1 (or Account 2) > Server to configure the register server, proxy server, outbound proxy server and NAT settings for this SIP account. Figure 68 VoIP > Account 1 (or Account 2) > Server The following table describes the labels in this screen.
Chapter 10 The VoIP Account Screens Table 51 VoIP > Account 1 (or Account 2) > Server LABEL DESCRIPTION Outbound Enter the IP address or domain name of the outbound proxy server Server provided by your VoIP service provider. You can use up to 127 printable ASCII characters.
Page 150
Chapter 10 The VoIP Account Screens The following table describes the labels in this screen. Table 52 VoIP > Account 1 (or Account 2) > Feature LABEL DESCRIPTION Feature Settings Block Select this to have the MAX208M2W Series block all incoming calls Anonymous from phone that do not send caller ID.
Page 151
Chapter 10 The VoIP Account Screens Table 52 VoIP > Account 1 (or Account 2) > Feature LABEL DESCRIPTION Busy CF, Select this if you want the MAX208M2W Series to forward incoming Busy CF calls to the specified phone number if the phone port is busy. Specify Target the phone number in the Busy CF Target field.
Chapter 10 The VoIP Account Screens 10.5 User Click VoIP > Account 1 (or Account 2) > User to configure advanced VoIP settings such as DTMF, call forwarding, call waiting and hotline settings. Figure 70 VoIP > Account 1 (or Account 2) > User The following table describes the labels in this screen.
Page 153
Chapter 10 The VoIP Account Screens Table 53 VoIP > Account 1 (or Account 2) > User LABEL DESCRIPTION 1st Codec, Select the MAX208M2W Series’s first, second, and third choices of the 2nd Codec, type of voice coder/decoder (codec) that you want the phone line to 3rd Codec use when communicating with the SIP server.
Chapter 10 The VoIP Account Screens 10.6 Dialing Click VoIP > Account 1 (or Account 2) > Dialing to configure dialing timeout values. Figure 71 VoIP > Account 1 (or Account 2) > Dialing The following table describes the labels in this screen. Table 54 VoIP >...
Chapter 10 The VoIP Account Screens Table 55 VoIP > Account 1 (or Account 2) > Speed Dial LABEL DESCRIPTION Active This field displays whether the rule is activated or not. Short Number This field displays the speed-dial number you want to use for this phone number.
Chapter 10 The VoIP Account Screens The following table describes the labels in this screen. Table 56 VoIP > Account 1 (or Account 2) > FAX LABEL DESCRIPTION Options Select which standard the MAX208M2W Series uses to handle faxes. The peer devices must also use standard.
A sends a SIP INVITE request to B. This message is an invitation for B to participate in a SIP telephone call. B sends a response indicating that the telephone is ringing. B sends an OK response after the call is answered. A then sends an ACK message to acknowledge that B has answered the call.
Page 158
Chapter 10 The VoIP Account Screens MAX208M2W Series User’s Guide...
Chapter 11 The VoIP Line Screens H A P T E R The VoIP Line Screens 11.1 Overview The VoIP > Line 1 and VoIP > Line 2 screens allow you to configure the volume, echo cancellation, VAD settings and custom tones for phone ports 1 and 2 which map to SIP accounts 1 and 2 (see Chapter 10 on page 139).
Chapter 11 The VoIP Line Screens Echo Cancellation G.168 is an ITU-T standard for eliminating the echo caused by the sound of your voice reverberating in the telephone receiver while you talk. 11.2 Phone Click VoIP > Line 1 (or Line 2) > Phone to configure phone and caller ID settings.
Chapter 11 The VoIP Line Screens Table 58 VoIP > Line 1 (or Line 2) > Phone LABEL DESCRIPTION Caller ID Select when to display the caller ID of incoming calls on the associated Display phone, before or after it rings (Before Ring or After Ring). Caller ID Power Enter the transmitting power level (0~3) the MAX208M2W Series uses Level...
Chapter 11 The VoIP Line Screens 11.4 Profile Click VoIP > Line 1 (or Line 2) > Profile to maintain settings that depend on which region of the world the MAX208M2W Series is in. Figure 76 VoIP > Line 1 (or Line 2) > Profile The following table describes the labels in this screen.
H A P T E R Maintenance 12.1 Overview Use these screens to manage and maintain your MAX208M2W Series. 12.1.1 What You Need to Know The following terms and concepts may help as you read through this chapter. Remote Management Limitations Remote management over LAN or WAN will not work when: You have disabled that service in one of the remote management screens.
Page 164
Chapter 12 Maintenance Remote Management and NAT When NAT is enabled: • Use the MAX208M2W Series’s WAN IP address when configuring from the WAN. • Use the MAX208M2W Series’s LAN IP address when configuring from the LAN. System Timeout There is a default system management idle timeout of five minutes. The MAX208M2W Series automatically logs you out if the management session remains idle for longer than this timeout period.
Page 165
Chapter 12 Maintenance TR-069 TR-069 is an abbreviation of “Technical Reference 069”, a protocol designed to facilitate the remote management of Customer Premise Equipement (CPE), such as the MAX208M2W Series. It can be managed over a WAN by means of an Auto Configuration Server (ACS).
Page 166
Chapter 12 Maintenance SNMP An SNMP managed network consists of two main types of component: agents and a manager. Figure 78 SNMP Management Model An agent is a management software module that resides in a managed device (the MAX208M2W Series). An agent translates the local management information from the managed device into a form compatible with SNMP.
Page 167
Chapter 12 Maintenance • Set - Allows the manager to set values for object variables within an agent. • Trap - Used by the agent to inform the manager of some events. The MAX208M2W Series sends traps to the SNMP manager when any of the following events occurs: Table 61 SNMP Traps TRAP NAME...
Page 168
Chapter 12 Maintenance The server disconnects from the MAX208M2W Series once all of its management operations have been carried out. Figure 79 OMA-DM Data Management OMA-DM Authentication In order to ensure the integrity of the connection between an OMA-DM server and the MAX208M2W Series, communication between the two is encoded using one of three common algorithms.
Page 169
Chapter 12 Maintenance OMA-DM Data Model Each device that conforms to the current OMA-DM standard has an identical data structure embedded in its controlling firmware. This allows a similarly conforming OMA-DM server to navigate the folder structure and to make file alterations where appropriate or required.
Chapter 12 Maintenance NTP stands for Network Time Protocol. It is employed by devices connected to the Internet in order to obtain a precise time setting from an official time server. These time servers are accurate to within 200 microseconds. 12.2 Password Use this screen to set up admin and guest accounts for logging into and managing the WiMAX Device.
Chapter 12 Maintenance 12.3 HTTP Use this screen to allow remote access to the WiMAX Device from a network connection over HTTP. Click Maintenance > Remote MGMT > HTTP to open this screen as shown next. Figure 82 HTTP Screen This screen contains the following fields: Table 63 HTTP LABEL...
Chapter 12 Maintenance 12.4 Telnet Use this screen to allow remote access to the WiMAX Device from a network connection over Telnet. Click Maintenance > Remote MGMT > Telnet to open this screen as shown next. Figure 83 Telnet Screen This screen contains the following fields: Table 64 Telnet LABEL...
Chapter 12 Maintenance This screen contains the following fields: Table 65 SSH LABEL DESCRIPTION Enable Select this to enable remote management using this service. Port Number Enter the port number this service can use to access the MAX208M2W Series. The computer must use the same port number. Allow Select this to allow connections using this service that originate on the Connection...
Chapter 12 Maintenance Table 66 SNMP (continued) LABEL DESCRIPTION Trap Server Enter the IP address of the station to send your SNMP traps to. Trap Enter the trap community, which is the password sent with each trap to Community the SNMP manager. The default is public and allows all requests. 12.7 CWMP Use this screen to allow CWMP connections for remote management, firmware upgrades and troubleshooting.
Page 175
Chapter 12 Maintenance Table 67 CWMP (continued) LABEL DESCRIPTION ACS Password Enter the password sent when the MAX208M2W Series connects to an ACS and which is used for authentication. You can enter up to 31 alphanumeric characters (a-z, A-Z, 0-9) and underscores but spaces are not allowed.
Chapter 12 Maintenance 12.8 OMA-DM Use this screen to allow remote access to the WiMAX Device from a network connection over OMA-DM. Click Maintenance > Remote MGMT > OMA-DM to open this screen as shown next. Figure 87 OMA-DM Screen This screen contains the following fields: Table 68 OMA-DM LABEL...
Page 177
Chapter 12 Maintenance Table 68 OMA-DM (continued) LABEL DESCRIPTION Server Enter the password for the server’s identification code. This shared Password public key is used by the MAX208M2W Series during the communication handshake process to identify the server. Server Nonce The MAX208M2W Series and the OMA-DM server use nonces to authenticate each other if you select MD5 as the authentication algorithm in the Server Auth Type field.
Chapter 12 Maintenance 12.9 Date Use these settings to set the system time or configure an NTP server for automatic time synchronization. Click Maintenance > Date/Time > Date to open this screen as shown next. Figure 88 Date Screen This screen contains the following fields: Table 69 Date LABEL DESCRIPTION...
Chapter 12 Maintenance 12.10 Time Zone Use this screen to set the time zone in which the WiMAX device is physically located. Click Maintenance > Date/Time > Time Zone to open this screen as shown next. Figure 89 Time Zone Screen This screen contains the following fields: Table 70 Time Zone LABEL...
Chapter 12 Maintenance Click Maintenance > Firmware Upgrade > Upgrade File to open this screen as shown next. Figure 90 Upgrade File Screen This screen contains the following fields: Table 71 Upgrade File LABEL DESCRIPTION Upgrade File Click Browse then browse to the location of a firmware upgrade file and select it.
Chapter 12 Maintenance 12.12 Upgrade Link Use this screen to set the URL of a firmware file on a remote computer and upload it to the WiMAX Device. Click Maintenance > Firmware Upgrade > Upgrade Link to open this screen as shown next.
Chapter 12 Maintenance This screen contains the following fields: Table 73 CWMP Upgrade LABEL DESCRIPTION Upgrade Click this to begin upgrading firmware using CWMP Request. This may take up to two minutes. Note: Do not turn off the device while firmware upload is in progress! 12.14 Backup Use this screen to backup your current WiMAX Device settings to a local computer.
Chapter 12 Maintenance 12.15 Restore Use this screen to restore your WiMAX Device settings from a backup file on a local computer. Click Maintenance > Backup/Restore > Restore to open this screen as shown next. Figure 94 Restore Screen This screen contains the following fields: Table 75 Restore LABEL DESCRIPTION...
Chapter 12 Maintenance If the upload was not successful, you are notified with an error message. 12.16 Factory Defaults Use this screen to restore the WiMAX Device to its factory default settings. Click Maintenance > Backup/Restore > Factory Defaults to open this screen as shown next.
Chapter 12 Maintenance Table 77 Log Setting (continued) LABEL DESCRIPTION Enable Remote Select this to allow logs to be recorded and stored on a remote logs server. Remote Log Enter the remote log host IP address if Enable Remote Log is Host selected.
Chapter 12 Maintenance 12.19 Ping Test Use this screen to test network connectivity using ping. Click Maintenance > Network Test > Ping to open this screen as shown next. Figure 98 Ping Screen This screen contains the following fields: Table 79 Ping LABEL DESCRIPTION IP Address...
Chapter 12 Maintenance 12.21 About This screen displays information about the MAX208M2W Series that can be useful when upgrading firmware, considering deployment options, and working with technical support if the device encounters difficulties. Click Maintenance > About to open this screen as shown next. Figure 100 About Screen This screen contains the following fields: Table 81 About...
Page 188
Chapter 12 Maintenance This screen contains the following fields: Table 82 Reboot LABEL DESCRIPTION Reboot Click this button to have the device perform a software restart. The Power LED blinks as it restarts and the shines steadily if the restart is successful.
• Internet Access • Reset the MAX218M2W to Its Factory Defaults 13.1 Power, Hardware Connections, and LEDs The MAX208M2W Series does not turn on. None of the LEDs turn on. Make sure you are using the power adapter or cord included with the MAX208M2W Series.
Page 190
Chapter 13 Troubleshooting Inspect your cables for damage. Contact the vendor to replace any damaged cables. Disconnect and re-connect the power adapter to the MAX208M2W Series. If the problem continues, contact the vendor. 13.2 MAX208M2W Series Access and Login I forgot the IP address for the MAX208M2W Series. The default IP address is .
Page 191
• If you changed the IP address and have forgotten it, see the troubleshooting suggestions for I forgot the IP address for the MAX218M2W. Check the hardware connections, and make sure the LEDs are behaving as expected. See the Quick Start Guide and Section 1.2.1 on page...
Page 192
Chapter 13 Troubleshooting I cannot Telnet to the MAX208M2W Series. See the troubleshooting suggestions for I cannot see or access the Login screen in the web configurator. Ignore the suggestions about your browser. 13.3 Internet Access I cannot access the Internet. Check the hardware connections, and make sure the LEDs are behaving as expected.
Page 193
Chapter 13 Troubleshooting If the problem continues, contact your ISP. The Internet connection is slow or intermittent. The quality of the MAX208M2W Series’s wireless connection to the base station may be poor. Poor signal reception may be improved by moving the MAX208M2W Series away from thick walls and other obstructions, or to a higher floor in your building.
Chapter 13 Troubleshooting You will lose all of your changes when you push the Reset button. To reset the MAX208M2W Series, Make sure the Power LED is on and not blinking. Press and hold the Reset button for five to ten seconds. Release the Reset button when the Power LED begins to blink.
H A P T E R Product Specifications This chapter gives details about your MAX208M2W Series’s hardware and firmware features. Table 83 Environmental and Hardware Specifications FEATURE DESCRIPTION Operating Temperature 0°C to 45°C Storage Temperature -25°C to 55°C Operating Humidity 10% ~ 95% (non-condensing) Storage Humidity 10% to 95% (non-condensing)
Page 196
Chapter 14 Product Specifications Table 84 Radio Specifications FEATURE DESCRIPTION Media Access Protocol IEEE 802.16e WiMAX Bandwidth 3.4 GHz ~ 3.6 GHz (MAX218M2W) 2.496 GHz~2.690 GHz (MAX208M2W) Data Rate Aggregate throughput: up to 20 mbps Upload: 7 mbps Modulation QPSK (uplink and downlink)
Page 197
Chapter 14 Product Specifications Table 85 Firmware Specifications (continued) FEATURE DESCRIPTION Network Address Network Address Translation (NAT) allows the translation of Translation (NAT) an Internet protocol address used within one network (for example a private IP address used in a local network) to a different IP address known within another network (for example a public IP address used on the Internet).
Page 198
Chapter 14 Product Specifications Table 85 Firmware Specifications (continued) FEATURE DESCRIPTION Logging Use the MAX208M2W Series’s logging feature to view connection history, surveillance logs, and error messages. Codecs G.711 (PCM -law and -law), G729, G.729a µ Fax Support T.38 FAX relay (FAX over UDP). G.711 fax relay for fax calls and be able to renegotiate codec to G.711 if a fax call is detected.
Page 199
Chapter 14 Product Specifications Table 86 Standards Supported (continued) STANDARD DESCRIPTION RFC 3263 Session Initiation Protocol (SIP): Locating SIP Servers RFC 3264 An Offer/Answer Model with the Session Description Protocol (SDP) RFC 3265 Session Initiation Protocol (SIP)-Specific Event Notification RFC 3323 A Privacy Mechanism for SIP RFC 3325 Private Extensions to the Session Initiation Protocol (SIP) for...
Page 200
Chapter 14 Product Specifications Table 87 Voice Features Auto Dial You can set the MAX208M2W Series to automatically dial a specified number immediately whenever you lift a phone off the hook. Use the Web Configurator to set the specified number. Use the command line interpreter to have the MAX208M2W Series wait a specified length of time before dialing the number.
Page 201
Chapter 14 Product Specifications Table 87 Voice Features SIP ALG Your device is a SIP Application Layer Gateway (ALG). It allows VoIP calls to pass through NAT for devices behind it (such as a SIP-based VoIP software application on a computer). Other Voice SIP version 2 (Session Initiating Protocol RFC 3261) Features...
Page 202
Chapter 14 Product Specifications Note: To take full advantage of the supplementary phone services available through the MAX208M2W Series's phone port, you may need to subscribe to the services from your voice account service provider. Not all features are supported by all service providers. Consult your service provider for more information.
Chapter 14 Product Specifications 14.1 Wall-Mounting This section shows you how to mount your MAX208M2W Series on a wall using the ZyXEL Wall-Mounting kit (not included). 14.1.1 The Wall-Mounting Kit The wall-mounting kit contains the following parts: Two Mortar Plugs (M4*L30 mm) Two Screws (M4*L30 mm) Wall-Mounting Chassis If any parts are missing, contact your vendor.
Page 204
Chapter 14 Product Specifications Attach the wall mounting chassis with the plugs and screws as shown below: Connect the MAX208M2W Series to the wall mounting chassis by snapping the chassis’ two upper chassis hooks into the matching holes on the MAX208M2W Series: Do not pinch or server the cable connections between the wall- mounting chassis the MAX208M2W Series.
Page 205
Chapter 14 Product Specifications Snap the lower chassis hooks into the matching holes on the MAX208M2W Series. The cable connections should come out either the left or right gaps between the wall-mounting chassis and the MAX208M2W Series Once you have snapped the wall-mounting chassis in place, the MAX208M2W Series is securely fastened to the wall.
Page 206
Chapter 14 Product Specifications MAX208M2W Series User’s Guide...
Page 207
P P E N D I X WiMAX Security Wireless security is vital to protect your wireless communications. Without it, information transmitted over the wireless network would be accessible to any networking device within range. User Authentication and Data Encryption The WiMAX (IEEE 802.16) standard employs user authentication and encryption to ensure secured communication at all times.
Appendix A WiMAX Security RADIUS RADIUS is based on a client-server model that supports authentication, authorization and accounting. The base station is the client and the server is the RADIUS server. The RADIUS server handles the following tasks: • Authentication Determines the identity of the users.
Appendix A WiMAX Security the network. In addition to the shared key, password information exchanged is also encrypted to protect the network from unauthorized access. Diameter Diameter (RFC 3588) is a type of AAA server that provides several improvements over RADIUS in efficiency, security, and support for roaming. Security Association The set of information about user authentication and data encryption between two computers is known as a security association (SA).
Page 210
Appendix A WiMAX Security Authentication The MAX208M2W Series supports EAP-TTLS authentication. EAP-TTLS (Tunneled Transport Layer Service) EAP-TTLS is an extension of the EAP-TLS authentication that uses certificates for only the server-side authentications to establish a secure connection (with EAP- TLS digital certifications are needed by both the server and the wireless clients for mutual authentication).
Page 211
P P E N D I X Setting Up Your Computer’s IP Address Note: Your specific ZyXEL device may not support all of the operating systems described in this appendix. See the product specifications for more information about which operating systems are supported. This appendix shows you how to configure the IP settings on your computer in order for it to be able to communicate with the other devices on your network.
Appendix B Setting Up Your Computer’s IP Address Windows XP/NT/2000 The following example uses the default Windows XP display theme but can also apply to Windows 2000 and Windows NT. Click Start > Control Panel. Figure 102 Windows XP: Start Menu In the Control Panel, click the Network Connections icon.
Page 213
Appendix B Setting Up Your Computer’s IP Address Right-click Local Area Connection and then select Properties. Figure 104 Windows XP: Control Panel > Network Connections > Properties On the General tab, select Internet Protocol (TCP/IP) and then click Properties. Figure 105 Windows XP: Local Area Connection Properties MAX208M2W Series User’s Guide...
Page 214
Appendix B Setting Up Your Computer’s IP Address The Internet Protocol TCP/IP Properties window opens. Figure 106 Windows XP: Internet Protocol (TCP/IP) Properties Select Obtain an IP address automatically if your network administrator or ISP assigns your IP address dynamically. Select Use the following IP Address and fill in the IP address, Subnet mask, and Default gateway fields if you have a static IP address that was assigned to you by your network administrator or ISP.
Appendix B Setting Up Your Computer’s IP Address Windows Vista This section shows screens from Windows Vista Professional. Click Start > Control Panel. Figure 107 Windows Vista: Start Menu In the Control Panel, click the Network and Internet icon. Figure 108 Windows Vista: Control Panel Click the Network and Sharing Center icon.
Page 216
Appendix B Setting Up Your Computer’s IP Address Click Manage network connections. Figure 110 Windows Vista: Network and Sharing Center Right-click Local Area Connection and then select Properties. Figure 111 Windows Vista: Network and Sharing Center Note: During this procedure, click Continue whenever Windows displays a screen saying that it needs your permission to continue.
Page 217
Appendix B Setting Up Your Computer’s IP Address Select Internet Protocol Version 4 (TCP/IPv4) and then select Properties. Figure 112 Windows Vista: Local Area Connection Properties MAX208M2W Series User’s Guide...
Page 218
Appendix B Setting Up Your Computer’s IP Address The Internet Protocol Version 4 (TCP/IPv4) Properties window opens. Figure 113 Windows Vista: Internet Protocol Version 4 (TCP/IPv4) Properties Select Obtain an IP address automatically if your network administrator or ISP assigns your IP address dynamically. Select Use the following IP Address and fill in the IP address, Subnet mask, and Default gateway fields if you have a static IP address that was assigned to you by your network administrator or ISP.
Page 219
Appendix B Setting Up Your Computer’s IP Address Mac OS X: 10.3 and 10.4 The screens in this section are from Mac OS X 10.4 but can also apply to 10.3. Click Apple > System Preferences. Figure 114 Mac OS X 10.4: Apple Menu In the System Preferences window, click the Network icon.
Page 220
Appendix B Setting Up Your Computer’s IP Address When the Network preferences pane opens, select Built-in Ethernet from the network connection type list, and then click Configure. Figure 116 Mac OS X 10.4: Network Preferences For dynamically assigned settings, select Using DHCP from the Configure IPv4 list in the TCP/IP tab.
Page 221
Appendix B Setting Up Your Computer’s IP Address For statically assigned settings, do the following: • From the Configure IPv4 list, select Manually. • In the IP Address field, type your IP address. • In the Subnet Mask field, type your subnet mask. •...
Page 222
Appendix B Setting Up Your Computer’s IP Address Verifying Settings Click Apply Now and close the window. Check your TCP/IP properties by clicking Applications > Utilities > Network Utilities, and then selecting the appropriate Network Interface from the Info tab. Figure 119 Mac OS X 10.4: Network Utility MAX208M2W Series User’s Guide...
Page 223
Appendix B Setting Up Your Computer’s IP Address Mac OS X: 10.5 The screens in this section are from Mac OS X 10.5. Click Apple > System Preferences. Figure 120 Mac OS X 10.5: Apple Menu In System Preferences, click the Network icon. Figure 121 Mac OS X 10.5: Systems Preferences MAX208M2W Series User’s Guide...
Page 224
Appendix B Setting Up Your Computer’s IP Address When the Network preferences pane opens, select Ethernet from the list of available connection types. Figure 122 Mac OS X 10.5: Network Preferences > Ethernet From the Configure list, select Using DHCP for dynamically assigned settings. For statically assigned settings, do the following: •...
Page 225
Appendix B Setting Up Your Computer’s IP Address • In the Router field, enter the IP address of your MAX208M2W Series. Figure 123 Mac OS X 10.5: Network Preferences > Ethernet Click Apply and close the window. MAX208M2W Series User’s Guide...
Page 226
Appendix B Setting Up Your Computer’s IP Address Verifying Settings Check your TCP/IP properties by clicking Applications > Utilities > Network Utilities, and then selecting the appropriate Network interface from the Info tab. Figure 124 Mac OS X 10.5: Network Utility Linux: Ubuntu 8 (GNOME) This section shows you how to configure your computer’s TCP/IP settings in the GNU Object Model Environment (GNOME) using the Ubuntu 8 Linux distribution.
Page 227
Appendix B Setting Up Your Computer’s IP Address Click System > Administration > Network. Figure 125 Ubuntu 8: System > Administration Menu When the Network Settings window opens, click Unlock to open the Authenticate window. (By default, the Unlock button is greyed out until clicked.) You cannot make changes to your configuration unless you first enter your admin password.
Page 228
Appendix B Setting Up Your Computer’s IP Address In the Authenticate window, enter your admin account name and password then click the Authenticate button. Figure 127 Ubuntu 8: Administrator Account Authentication In the Network Settings window, select the connection that you want to configure, then click Properties.
Page 229
Appendix B Setting Up Your Computer’s IP Address The Properties dialog box opens. Figure 129 Ubuntu 8: Network Settings > Properties • In the Configuration list, select Automatic Configuration (DHCP) if you have a dynamic IP address. • In the Configuration list, select Static IP address if you have a static IP address.
Page 230
Appendix B Setting Up Your Computer’s IP Address If you know your DNS server IP address(es), click the DNS tab in the Network Settings window and then enter the DNS server information in the fields provided. Figure 130 Ubuntu 8: Network Settings > DNS Click the Close button to apply the changes.
Page 231
Appendix B Setting Up Your Computer’s IP Address tab. The Interface Statistics column shows data if your connection is working properly. Figure 131 Ubuntu 8: Network Tools MAX208M2W Series User’s Guide...
Page 232
Appendix B Setting Up Your Computer’s IP Address Linux: openSUSE 10.3 (KDE) This section shows you how to configure your computer’s TCP/IP settings in the K Desktop Environment (KDE) using the openSUSE 10.3 Linux distribution. The procedure, screens and file locations may vary depending on your specific distribution, release version, and individual configuration.
Page 233
Appendix B Setting Up Your Computer’s IP Address When the Run as Root - KDE su dialog opens, enter the admin password and click OK. Figure 133 openSUSE 10.3: K Menu > Computer Menu When the YaST Control Center window opens, select Network Devices and then click the Network Card icon.
Page 234
Appendix B Setting Up Your Computer’s IP Address When the Network Settings window opens, click the Overview tab, select the appropriate connection Name from the list, and then click the Configure button. Figure 135 openSUSE 10.3: Network Settings MAX208M2W Series User’s Guide...
Page 235
Appendix B Setting Up Your Computer’s IP Address When the Network Card Setup window opens, click the Address tab Figure 136 openSUSE 10.3: Network Card Setup Select Dynamic Address (DHCP) if you have a dynamic IP address. Select Statically assigned IP Address if you have a static IP address. Fill in the IP address, Subnet mask, and Hostname fields.
Page 236
Appendix B Setting Up Your Computer’s IP Address If you know your DNS server IP address(es), click the Hostname/DNS tab in Network Settings and then enter the DNS server information in the fields provided. Figure 137 openSUSE 10.3: Network Settings Click Finish to save your settings and close the window.
Page 237
Appendix B Setting Up Your Computer’s IP Address Verifying Settings Click the KNetwork Manager icon on the Task bar to check your TCP/IP properties. From the Options sub-menu, select Show Connection Information. Figure 138 openSUSE 10.3: KNetwork Manager When the Connection Status - KNetwork Manager window opens, click the Statistics tab to see if your connection is working properly.
Page 238
Appendix B Setting Up Your Computer’s IP Address MAX208M2W Series User’s Guide...
Page 239
P P E N D I X Pop-up Windows, JavaScript and Java Permissions In order to use the web configurator you need to allow: • Web browser pop-up windows from your device. • JavaScript (enabled by default). • Java permissions (enabled by default). Note: Internet Explorer 6 screens are used here.
Appendix C Pop-up Windows, JavaScript and Java Permissions In Internet Explorer, select Tools, Internet Options, Privacy. Clear the Block pop-ups check box in the Pop-up Blocker section of the screen. This disables any web pop-up blockers you may have enabled. Figure 141 Internet Options: Privacy Click Apply to save this setting.
Page 241
Appendix C Pop-up Windows, JavaScript and Java Permissions Select Settings…to open the Pop-up Blocker Settings screen. Figure 142 Internet Options: Privacy Type the IP address of your device (the web page that you do not want to have blocked) with the prefix “http://”. For example, http://192.168.167.1. MAX208M2W Series User’s Guide...
Page 242
Appendix C Pop-up Windows, JavaScript and Java Permissions Click Add to move the IP address to the list of Allowed sites. Figure 143 Pop-up Blocker Settings Click Close to return to the Privacy screen. Click Apply to save this setting. JavaScript If pages of the web configurator do not display properly in Internet Explorer, check that JavaScript is allowed.
Page 243
Appendix C Pop-up Windows, JavaScript and Java Permissions In Internet Explorer, click Tools, Internet Options and then the Security tab. Figure 144 Internet Options: Security Click the Custom Level... button. Scroll down to Scripting. Under Active scripting make sure that Enable is selected (the default). Under Scripting of Java applets make sure that Enable is selected (the default).
Appendix C Pop-up Windows, JavaScript and Java Permissions Click OK to close the window. Figure 145 Security Settings - Java Scripting Java Permissions From Internet Explorer, click Tools, Internet Options and then the Security tab. Click the Custom Level... button. Scroll down to Microsoft VM.
Page 245
Appendix C Pop-up Windows, JavaScript and Java Permissions Click OK to close the window. Figure 146 Security Settings - Java JAVA (Sun) From Internet Explorer, click Tools, Internet Options and then the Advanced tab. Make sure that Use Java 2 for <applet> under Java (Sun) is selected. MAX208M2W Series User’s Guide...
Page 246
Appendix C Pop-up Windows, JavaScript and Java Permissions Click OK to close the window. Figure 147 Java (Sun) Mozilla Firefox Mozilla Firefox 2.0 screens are used here. Screens for other versions may vary. You can enable Java, Javascript and pop-ups in one screen. Click Tools, then click Options in the screen that appears.
Page 247
Appendix C Pop-up Windows, JavaScript and Java Permissions Click Content.to show the screen below. Select the check boxes as shown in the following screen. Figure 149 Mozilla Firefox Content Security MAX208M2W Series User’s Guide...
Page 248
Appendix C Pop-up Windows, JavaScript and Java Permissions MAX208M2W Series User’s Guide...
P P E N D I X IP Addresses and Subnetting This appendix introduces IP addresses and subnet masks. IP addresses identify individual devices on a network. Every networking device (including computers, servers, routers, printers, etc.) needs an IP address to communicate across the network.
Appendix D IP Addresses and Subnetting The following figure shows an example IP address in which the first three octets (192.168.1) are the network number, and the fourth octet (16) is the host ID. Figure 150 Network Number and Host ID How much of the IP address is the network number and how much is the host ID varies according to the subnet mask.
Page 251
Appendix D IP Addresses and Subnetting By convention, subnet masks always consist of a continuous sequence of ones beginning from the leftmost bit of the mask, followed by a continuous sequence of zeros, for a total number of 32 bits. Subnet masks can be referred to by the size of the network number part (the bits with a “1”...
Page 252
Appendix D IP Addresses and Subnetting Notation Since the mask is always a continuous number of ones beginning from the left, followed by a continuous number of zeros for the remainder of the 32 bit mask, you can simply specify the number of ones instead of writing the value of each octet.
Page 253
Appendix D IP Addresses and Subnetting The following figure shows the company network before subnetting. Figure 151 Subnetting Example: Before Subnetting You can “borrow” one of the host ID bits to divide the network 192.168.1.0 into two separate sub-networks. The subnet mask is now 25 bits (255.255.255.128 or /25).
Page 254
Appendix D IP Addresses and Subnetting The following figure shows the company network after subnetting. There are now two sub-networks, A and B. Figure 152 Subnetting Example: After Subnetting In a 25-bit subnet the host ID has 7 bits, so each sub-network has a maximum of –...
Page 255
Appendix D IP Addresses and Subnetting Each subnet contains 6 host ID bits, giving 2 - 2 or 62 hosts for each subnet (a host ID of all zeroes is the subnet itself, all ones is the subnet’s broadcast address). Table 93 Subnet 1 LAST OCTET BIT IP/SUBNET MASK...
Page 256
Appendix D IP Addresses and Subnetting Table 96 Subnet 4 (continued) LAST OCTET BIT IP/SUBNET MASK NETWORK NUMBER VALUE Subnet Address: Lowest Host ID: 192.168.1.193 192.168.1.192 Broadcast Address: Highest Host ID: 192.168.1.254 192.168.1.255 Example: Eight Subnets Similarly, use a 27-bit mask to create eight subnets (000, 001, 010, 011, 100, 101, 110 and 111).
Appendix D IP Addresses and Subnetting The following table is a summary for subnet planning on a network with a 16-bit network number. Table 99 16-bit Network Number Subnet Planning NO. “BORROWED” NO. HOSTS PER SUBNET MASK NO. SUBNETS HOST BITS SUBNET 255.255.128.0 (/17) 32766...
Page 258
Appendix D IP Addresses and Subnetting address that you entered. You don't need to change the subnet mask computed by the MAX208M2W Series unless you are instructed to do otherwise. Private IP Addresses Every machine on the Internet must have a unique address. If your networks are isolated from the Internet (running only between two branch offices, for example) you can assign any IP addresses to the hosts without problems.
Page 259
Appendix D IP Addresses and Subnetting address to computer A or setting computer A to obtain an IP address automatically. Figure 153 Conflicting Computer IP Addresses Example Conflicting Router IP Addresses Example Since a router connects different networks, it must have interfaces using different network numbers.
Page 260
Appendix D IP Addresses and Subnetting The computer cannot access the Internet. This problem can be solved by assigning a different IP address to the computer or the router’s LAN port. Figure 155 Conflicting Computer and Router IP Addresses Example MAX208M2W Series User’s Guide...
P P E N D I X Importing Certificates This appendix shows you how to import public key certificates into your web browser. Public key certificates are used by web browsers to ensure that a secure web site is legitimate. When a certificate authority such as VeriSign, Comodo, or Network Solutions, to name a few, receives a certificate request from a website operator, they confirm that the web domain and contact information in the request match those on public record with a domain name registrar.
Appendix E Importing Certificates Internet Explorer The following example uses Microsoft Internet Explorer 7 on Windows XP Professional; however, they can also apply to Internet Explorer on Windows Vista. If your device’s web configurator is set to use SSL certification, then the first time you browse to it you are presented with a certification error.
Page 263
Appendix E Importing Certificates In the Address Bar, click Certificate Error > View certificates. Figure 158 Internet Explorer 7: Certificate Error In the Certificate dialog box, click Install Certificate. Figure 159 Internet Explorer 7: Certificate MAX208M2W Series User’s Guide...
Page 264
Appendix E Importing Certificates In the Certificate Import Wizard, click Next. Figure 160 Internet Explorer 7: Certificate Import Wizard If you want Internet Explorer to Automatically select certificate store based on the type of certificate, click Next again and then go to step 9. Figure 161 Internet Explorer 7: Certificate Import Wizard MAX208M2W Series User’s Guide...
Page 265
Appendix E Importing Certificates Otherwise, select Place all certificates in the following store and then click Browse. Figure 162 Internet Explorer 7: Certificate Import Wizard In the Select Certificate Store dialog box, choose a location in which to save the certificate and then click OK.
Page 266
Appendix E Importing Certificates In the Completing the Certificate Import Wizard screen, click Finish. Figure 164 Internet Explorer 7: Certificate Import Wizard 10 If you are presented with another Security Warning, click Yes. Figure 165 Internet Explorer 7: Security Warning MAX208M2W Series User’s Guide...
Page 267
Appendix E Importing Certificates 11 Finally, click OK when presented with the successful certificate installation message. Figure 166 Internet Explorer 7: Certificate Import Wizard 12 The next time you start Internet Explorer and go to a ZyXEL web configurator page, a sealed padlock icon appears in the address bar. Click it to view the page’s Website Identification information.
Page 268
Appendix E Importing Certificates Installing a Stand-Alone Certificate File in Internet Explorer Rather than browsing to a ZyXEL web configurator and installing a public key certificate when prompted, you can install a stand-alone certificate file if one has been issued to you. Double-click the public key certificate file.
Page 269
Appendix E Importing Certificates Removing a Certificate in Internet Explorer This section shows you how to remove a public key certificate in Internet Explorer Open Internet Explorer and click TOOLS > Internet Options. Figure 170 Internet Explorer 7: Tools Menu In the Internet Options dialog box, click Content >...
Page 270
Appendix E Importing Certificates In the Certificates dialog box, click the Trusted Root Certificates Authorities tab, select the certificate that you want to delete, and then click Remove. Figure 172 Internet Explorer 7: Certificates In the Certificates confirmation, click Yes. Figure 173 Internet Explorer 7: Certificates In the Root Certificate Store dialog box, click Yes.
Page 271
Appendix E Importing Certificates The next time you go to the web site that issued the public key certificate you just removed, a certification error appears. MAX208M2W Series User’s Guide...
Page 272
Appendix E Importing Certificates Firefox The following example uses Mozilla Firefox 2 on Windows XP Professional; however, the screens can also apply to Firefox 2 on all platforms. If your device’s web configurator is set to use SSL certification, then the first time you browse to it you are presented with a certification error.
Page 273
Appendix E Importing Certificates The certificate is stored and you can now connect securely to the web configurator. A sealed padlock appears in the address bar, which you can click to open the Page Info > Security window to view the web page’s security information. Figure 176 Firefox 2: Page Info MAX208M2W Series User’s Guide...
Page 274
Appendix E Importing Certificates Installing a Stand-Alone Certificate File in Firefox Rather than browsing to a ZyXEL web configurator and installing a public key certificate when prompted, you can install a stand-alone certificate file if one has been issued to you. Open Firefox and click TOOLS >...
Page 275
Appendix E Importing Certificates In the Certificate Manager dialog box, click Web Sites > Import. Figure 179 Firefox 2: Certificate Manager Use the Select File dialog box to locate the certificate and then click Open. Figure 180 Firefox 2: Select File The next time you visit the web site, click the padlock in the address bar to open the Page Info >...
Page 276
Appendix E Importing Certificates Removing a Certificate in Firefox This section shows you how to remove a public key certificate in Firefox 2. Open Firefox and click TOOLS > Options. Figure 181 Firefox 2: Tools Menu In the Options dialog box, click ADVANCED > Encryption > View Certificates. Figure 182 Firefox 2: Options MAX208M2W Series User’s Guide...
Page 277
Appendix E Importing Certificates In the Certificate Manager dialog box, select the Web Sites tab, select the certificate that you want to remove, and then click Delete. Figure 183 Firefox 2: Certificate Manager In the Delete Web Site Certificates dialog box, click OK. Figure 184 Firefox 2: Delete Web Site Certificates The next time you go to the web site that issued the public key certificate you just removed, a certification error appears.
Page 278
Appendix E Importing Certificates Opera The following example uses Opera 9 on Windows XP Professional; however, the screens can apply to Opera 9 on all platforms. If your device’s web configurator is set to use SSL certification, then the first time you browse to it you are presented with a certification error.
Page 279
Appendix E Importing Certificates The next time you visit the web site, click the padlock in the address bar to open the Security information window to view the web page’s security details. Figure 186 Opera 9: Security information MAX208M2W Series User’s Guide...
Page 280
Appendix E Importing Certificates Installing a Stand-Alone Certificate File in Opera Rather than browsing to a ZyXEL web configurator and installing a public key certificate when prompted, you can install a stand-alone certificate file if one has been issued to you. Open Opera and click TOOLS >...
Page 281
Appendix E Importing Certificates In Preferences, click ADVANCED > Security > Manage certificates. Figure 188 Opera 9: Preferences MAX208M2W Series User’s Guide...
Page 282
Appendix E Importing Certificates In the Certificates Manager, click Authorities > Import. Figure 189 Opera 9: Certificate manager Use the Import certificate dialog box to locate the certificate and then click Open. Figure 190 Opera 9: Import certificate MAX208M2W Series User’s Guide...
Page 283
Appendix E Importing Certificates In the Install authority certificate dialog box, click Install. Figure 191 Opera 9: Install authority certificate Next, click OK. Figure 192 Opera 9: Install authority certificate The next time you visit the web site, click the padlock in the address bar to open the Security information window to view the web page’s security details.
Page 284
Appendix E Importing Certificates Removing a Certificate in Opera This section shows you how to remove a public key certificate in Opera 9. Open Opera and click TOOLS > Preferences. Figure 193 Opera 9: Tools Menu In Preferences, ADVANCED > Security > Manage certificates. Figure 194 Opera 9: Preferences MAX208M2W Series User’s Guide...
Page 285
Appendix E Importing Certificates In the Certificates manager, select the Authorities tab, select the certificate that you want to remove, and then click Delete. Figure 195 Opera 9: Certificate manager The next time you go to the web site that issued the public key certificate you just removed, a certification error appears.
Page 286
Appendix E Importing Certificates Konqueror The following example uses Konqueror 3.5 on openSUSE 10.3, however the screens apply to Konqueror 3.5 on all Linux KDE distributions. If your device’s web configurator is set to use SSL certification, then the first time you browse to it you are presented with a certification error.
Page 287
Appendix E Importing Certificates Click the padlock in the address bar to open the KDE SSL Information window and view the web page’s security details. Figure 198 Konqueror 3.5: KDE SSL Information MAX208M2W Series User’s Guide...
Page 288
Appendix E Importing Certificates Installing a Stand-Alone Certificate File in Konqueror Rather than browsing to a ZyXEL web configurator and installing a public key certificate when prompted, you can install a stand-alone certificate file if one has been issued to you. Double-click the public key certificate file.
Page 289
Appendix E Importing Certificates The next time you visit the web site, click the padlock in the address bar to open the KDE SSL Information window to view the web page’s security details. MAX208M2W Series User’s Guide...
Page 290
Appendix E Importing Certificates Removing a Certificate in Konqueror This section shows you how to remove a public key certificate in Konqueror 3.5. Open Konqueror and click Settings > Configure Konqueror. Figure 202 Konqueror 3.5: Settings Menu In the Configure dialog box, select Crypto. On the Peer SSL Certificates tab, select the certificate you want to delete and then click Remove.
Page 291
Appendix E Importing Certificates Note: There is no confirmation when you remove a certificate authority, so be absolutely certain you want to go through with it before clicking the button. MAX208M2W Series User’s Guide...
Page 292
Appendix E Importing Certificates MAX208M2W Series User’s Guide...
Page 293
P P E N D I X Common Services The following table lists some commonly-used services and their associated protocols and port numbers. For a comprehensive list of port numbers, ICMP type/ code numbers and services, visit the IANA (Internet Assigned Number Authority) web site.
Page 294
Appendix F Common Services Table 100 Commonly Used Services (continued) NAME PROTOCOL PORT(S) DESCRIPTION User-Defined The IPSEC ESP (Encapsulation (IPSEC_TUNNEL) Security Protocol) tunneling protocol uses this service. FINGER Finger is a UNIX or Internet related command that can be used to find out if a user is logged on.
Page 295
Appendix F Common Services Table 100 Commonly Used Services (continued) NAME PROTOCOL PORT(S) DESCRIPTION PPTP 1723 Point-to-Point Tunneling Protocol enables secure transfer of data over public networks. This is the control channel. PPTP_TUNNEL User-Defined PPTP (Point-to-Point Tunneling (GRE) Protocol) enables secure transfer of data over public networks.
Page 296
Appendix F Common Services Table 100 Commonly Used Services (continued) NAME PROTOCOL PORT(S) DESCRIPTION TFTP Trivial File Transfer Protocol is an Internet file transfer protocol similar to FTP, but uses the UDP (User Datagram Protocol) rather than TCP (Transmission Control Protocol). VDOLIVE 7000 Another videoconferencing solution.
ZyXEL Communications Corporation. Published by ZyXEL Communications Corporation. All rights reserved. Disclaimers ZyXEL does not assume any liability arising out of the application or use of any products, or software described herein.
Page 298
Appendix G Legal Information Certifications Federal Communications Commission (FCC) Interference Statement The device complies with Part 15 of FCC rules. Operation is subject to the following two conditions: • This device complies with part 15 of the FCC Rules. • Operation is subject to the condition that this device does not cause harmful interference.
Appendix G Legal Information 第十四條 低功率射頻電機之使用不得影響飛航安全及干擾合法通信;經發現 有干擾現象時,應立即停用,並改善至無干擾時方得繼續使用。 前項合法通信,指依電信規定作業之無線電信。低功率射頻電機須忍 受合法通信或工業、科學及醫療用電波輻射性電機設備之干擾。 本機限在不干擾合法電臺與不受被干擾保障條件下於室內使用。 減少電磁波影響,請妥適使用。 Notices Changes or modifications not expressly approved by the party responsible for compliance could void the user's authority to operate the equipment. This Class B digital apparatus complies with Canadian ICES-003. Cet appareil numérique de la classe B est conforme à...
Page 300
Appendix G Legal Information Note Repair or replacement, as provided under this warranty, is the exclusive remedy of the purchaser. This warranty is in lieu of all other warranties, express or implied, including any implied warranty of merchantability or fitness for a particular use or purpose.
Page 301
Index Index CBC-MAC CCMP 203, 205 cell certificates accounting server formats see AAA verification ACK message certification activity notices Advanced Encryption Standard viewing see AES Certification Authority, see CA chaining chaining message authentication alternative subnet mask notation see CCMP analysis-by-synthesis circuit-switched telephone networks Application Layer Gateway Class of Service (CoS)
Page 302
Index Differentiated Services see DiffServ DiffServ hybrid waveform codec DiffServ Code Point (DSCP) marking rule digital ID 70, 203 DS field DSCP IANA see DiffServ identity 68, 203 DTMF idle timeout dual-tone multi-frequency IEEE 802.16 see DTMF 67, 203 IEEE 802.16e Dynamic Host Configuration Protocol IGD 1.0 see DHCP...
Page 303
Index mobile station see MS public certificate public key multimedia pulse code modulation push button and remote management server sets quality of service traversal NAT routers network activity services RADIUS network address translators 68, 70, 204 Message Types Messages Shared Secret Key Real-time Transport Protocol see RTP OK response...
Page 304
Index services Session Initiation Protocol see SIP Touch Tone® silence suppression transport encryption key silent packets see TEK transport layer security account see TLS ACK message trigger port forwarding process 92, 142 Application Layer Gateway, see ALG TTLS 203, 206 BYE request tunneled TLS call progression...
Page 305
Index waveform codec WiFi Protected Setup, see WPS WiMAX 67–68 security WiMAX Forum Wireless Interoperability for Microwave Access see WiMAX wireless LAN adding stations push button Wireless Metropolitan Area Network see MAN wireless network access standard wireless security wizard setup adding stations push button MAX208M2W Series User’s Guide...
Need help?
Do you have a question about the MAX218M2W and is the answer not in the manual?
Questions and answers