ZyXEL Communications LTE6100 User Manual
ZyXEL Communications LTE6100 User Manual

ZyXEL Communications LTE6100 User Manual

Lte outdoor gateway
Table of Contents

Advertisement

Quick Links

LTE6100
LTE Outdoor Gateway
Default Login Details
Web
http://192.168.1.1
Address
Admin's
admin / 1234
User Name
and
Password
Guest's
User Name
and
Password
Edition 1, 7/2012
om
www.zyxel.com
user / 1234
Copyright © 2012
ZyXEL Communications Corporation

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the LTE6100 and is the answer not in the manual?

Questions and answers

Summary of Contents for ZyXEL Communications LTE6100

  • Page 1 LTE6100 LTE Outdoor Gateway Default Login Details http://192.168.1.1 Address Admin’s admin / 1234 User Name Password Guest’s user / 1234 User Name Password Edition 1, 7/2012 www.zyxel.com Copyright © 2012 ZyXEL Communications Corporation...
  • Page 2 (See the wizard real time help for information on configuring each screen.) It also contains a connection diagram and package contents list. Note: It is recommended you use the Web Configurator to configure the LTE Device. LTE6100 User’s Guide...
  • Page 3: Table Of Contents

    Parental Control ............................81 VPN .................................85 Logs ...............................99 Traffic Status ............................101 User Account ............................105 Remote MGMT ............................107 System ..............................109 Time Setting ............................111 Log Setting ............................113 Firmware Upgrade ..........................115 Backup/Restore ............................. 117 Diagnostic .............................121 Troubleshooting ............................123 LTE6100 User’s Guide...
  • Page 4 Contents Overview LTE6100 User’s Guide...
  • Page 5: Table Of Contents

    2.2.4 User Account ...........................20 2.2.5 Navigation Panel ........................21 Part II: Technical Reference................23 Chapter 3 Connection Status and System Info ....................25 3.1 Overview ............................25 3.2 The Connection Status Screen ......................25 3.3 The System Info Screen ........................27 Chapter 4 Broadband............................31 LTE6100 User’s Guide...
  • Page 6 7.3.1 Add/Edit a QoS Queue ......................52 7.4 The Class Setup Screen .........................52 7.4.1 Add/Edit QoS Class ........................54 7.5 The QoS Monitor Screen .........................56 7.6 QoS Technical Reference .........................57 7.6.1 DiffServ ............................57 Chapter 8 Network Address Translation (NAT)....................59 8.1 Overview ............................59 LTE6100 User’s Guide...
  • Page 7 10.6.2 Security Considerations ......................76 Chapter 11 MAC Filter............................79 11.1 Overview ............................79 11.1.1 What You Need to Know ......................79 11.2 The MAC Filter Screen ........................79 Chapter 12 Parental Control ..........................81 12.1 Overview ............................81 12.2 The Parental Control Screen ......................81 LTE6100 User’s Guide...
  • Page 8 15.2 The WAN Status Screen .......................101 15.3 The LAN Status Screen .........................102 15.4 The NAT Status Screen .........................103 Chapter 16 User Account ............................105 16.1 Overview ............................105 16.2 The User Account Screen ......................105 Chapter 17 Remote MGMT...........................107 17.1 Overview ............................107 LTE6100 User’s Guide...
  • Page 9 Diagnostic ............................121 23.1 Overview ............................121 23.2 The Ping/TraceRoute Screen ......................121 Chapter 24 Troubleshooting..........................123 24.1 Overview ............................123 24.2 Power, Hardware Connections, and LEDs ..................123 24.3 LTE Device Access and Login ......................124 24.4 Internet Access ..........................125 24.5 UPnP .............................126 LTE6100 User’s Guide...
  • Page 10 Table of Contents Appendix A IP Addresses and Subnetting..................127 Appendix B Setting Up Your Computer’s IP Address ..............137 Appendix C Pop-up Windows, JavaScript and Java Permissions ...........167 Appendix D Common Services......................177 Appendix E Legal Information......................181 Index ..............................185 LTE6100 User’s Guide...
  • Page 11: User's Guide

    User’s Guide...
  • Page 13: Introduction

    Here are some example uses for which the LTE Device is well suited. 1.2.1 Internet Access Your LTE Device provides Internet access by connecting to an LTE network wirelessly. Computers can connect to the LTE Device’s ETHERNET ports. Figure 1 LTE Device’s Internet Access Application LTE6100 User’s Guide...
  • Page 14: Ways To Manage The Lte Device

    LTE Device. You could simply restore your last configuration. Write down any information your ISP provides you. 1.5 LEDs (Lights) The following graphic displays the labels of the LEDs. Figure 2 LEDs on the Top of the Device Figure 3 LEDs on the Ethernet Ports LTE6100 User’s Guide...
  • Page 15: The Reset Button

    To set the device back to the factory default settings, press the RESET button for 5 seconds or until the POWER LED begins to blink and then release it. When the POWER LED begins to blink, the defaults have been restored and the device restarts. LTE6100 User’s Guide...
  • Page 16 Chapter 1 Introduction LTE6100 User’s Guide...
  • Page 17: Introducing The Web Configurator

    A password screen displays. Type “admin” as the default Username and “1234” as the default password to access the device’s Web Configurator. Click Login. If you have changed the password, enter your password and click Login. Figure 4 Password Screen LTE6100 User’s Guide...
  • Page 18 Apply; alternatively click Skip to proceed to the main menu if you do not want to change the password now. Figure 5 Change Password Screen The Connection Status screen appears. Figure 6 Connection Status Click System Info to display the System Info screen, where you can view the LTE Device’s interface and system information. LTE6100 User’s Guide...
  • Page 19: The Web Configurator Layout

    As illustrated above, the main screen is divided into these parts: • A - title bar • B - main window • C - navigation panel 2.2.1 Title Bar The title bar shows the following icon in the upper right corner. LTE6100 User’s Guide...
  • Page 20: Main Window

    WAN, LAN interfaces and NAT. See Chapter 18 on page 109 for more information. 2.2.4 User Account Use the Maintenance > User Accounts screen to configure system password for different user accounts. See Chapter 16 on page 105 for more information. LTE6100 User’s Guide...
  • Page 21: Navigation Panel

    Setup Use this screen to configure IPSec VPN connections. Monitor Use this screen to view IPSec VPN connection status. System Monitor System Log Use this screen to view the system logs for the categories that you select. LTE6100 User’s Guide...
  • Page 22 Use this screen to backup and restore your device’s configuration Restore (settings) or reset the factory default settings. Reboot Reboot Use this screen to reboot the LTE Device without turning the power off. Diagnostic Ping/TraceRoute Use this screen to test the connections to other devices. LTE6100 User’s Guide...
  • Page 23: Technical Reference

    Technical Reference The appendices provide general information. Some details may not apply to your LTE Device.
  • Page 25: Connection Status And System Info

    Section 2.2.2 on page 20 for more information. 3.2 The Connection Status Screen Use this screen to view the network connection status of the device and its clients. A warning message appears if there is a connection problem. LTE6100 User’s Guide...
  • Page 26 In Icon View, if you want to view information about a client, click the client’s name and Info. Click the IP address if you want to change it. If you want to change the name or icon of the client, click Change name/icon. In List View, you can also view the client’s information. LTE6100 User’s Guide...
  • Page 27: The System Info Screen

    Software Version This field displays the current version of the firmware inside the device. It also shows the date the firmware version was created. Go to the Maintenance > Firmware Upgrade screen to change it. WAN Information LTE6100 User’s Guide...
  • Page 28 (Maintenance > Reboot), or when you reset it (see Section 1.6 on page 15). Current Date/Time This field displays the current date and time in the LTE Device. You can change this in Maintenance > Time Setting. System Resource LTE6100 User’s Guide...
  • Page 29 Usually, this percentage should not increase much. If memory usage does get close to 100%, the LTE Device is probably becoming unstable, and you should restart the device. See Chapter 22 on page 119, or turn off the device (unplug the power) for a few seconds. LTE6100 User’s Guide...
  • Page 30 Chapter 3 Connection Status and System Info LTE6100 User’s Guide...
  • Page 31: Broadband

    It is used by the LTE Device to communicate with other devices in other networks. It can be static (fixed) or dynamically assigned by the ISP each time the LTE Device tries to access the Internet. LTE6100 User’s Guide...
  • Page 32: Before You Begin

    Click the Delete icon to delete this connection from the Device. A window displays asking you to confirm that you want to delete the connection. 4.2.1 Edit Internet Connection Use this screen to configure a WAN connection. LTE6100 User’s Guide...
  • Page 33: The Sim Screen

    Click Back to return to the previous screen. 4.3 The SIM Screen Use the SIM screen to enter the PIN of your SIM card. If the wrong PIN code is entered 3 times, it will cause the SIM card to be locked. LTE6100 User’s Guide...
  • Page 34: Puk Code Screen

    4.3.1 PUK Code Screen If the SIM card is locked, use this screen to enter the PUK code. Note: You may have to ask the service provider for a PUK code to unlock the SIM card. Figure 16 PUK Code LTE6100 User’s Guide...
  • Page 35: Technical Reference

    If your ISP gives you DNS server addresses, manually enter them in the DNS server fields. If your ISP dynamically assigns the DNS server IP addresses (along with the LTE Device’s WAN IP address), set the DNS server fields to get the DNS server address from the ISP. LTE6100 User’s Guide...
  • Page 36 1880 MHz – 1920 MHz 1880 MHz – 1920 MHz 2300 MHz – 2400 MHz 2300 MHz – 2400 MHz 2496 MHz 2690 MHz 2496 MHz 2690 MHz 3400 MHz – 3600 MHz 3400 MHz – 3600 MHz LTE6100 User’s Guide...
  • Page 37 BASE STATION RECEIVE BASE STATION TRANSMIT DUPLEX BAND MODE CPE TRANSMIT CPE RECEIVE UL (LOW - HIGH) DL (LOW - HIGH) 3600 MHz – 3800 MHz 3600 MHz – 3800 MHz Note 1: Band 6 is not applicable LTE6100 User’s Guide...
  • Page 38 Chapter 4 Broadband LTE6100 User’s Guide...
  • Page 39: Home Networking

    5.1.2.1 About LAN IP Address Similar to the way houses on a street share a common street name, so too do computers on a LAN share one common network number. This is known as an Internet Protocol address. LTE6100 User’s Guide...
  • Page 40 When a UPnP device joins a network, it announces its presence with a multicast message. For security reasons, the LTE Device allows multicast messages on the LAN only. All UPnP-enabled devices may communicate freely with each other without additional configuration. Disable UPnP if this is not your intention. LTE6100 User’s Guide...
  • Page 41: The Lan Setup Screen

    IP Addressing Values IP Pool Starting This field specifies the first of the contiguous addresses in the IP address pool. Address Pool Size This field specifies the size, or count of the IP address pool. DNS Values LTE6100 User’s Guide...
  • Page 42: The Static Dhcp Screen

    The following table describes the labels in this screen. Table 10 Network Setting > Home Networking > Static DHCP LABEL DESCRIPTION Add new static Click this to add a new static DHCP entry. lease This is the index number of the entry. LTE6100 User’s Guide...
  • Page 43: The Upnp Screen

    A UPnP device can dynamically join a network, obtain an IP address, convey its capabilities and learn about other devices on the network. In turn, a device can leave a network smoothly and automatically when it is no longer in use. LTE6100 User’s Guide...
  • Page 44 Select Enable to activate UPnP. Be aware that anyone could use a UPnP application to open the web configurator's login screen without entering the LTE Device's IP address (although you must still enter the password to access the web configurator). Apply Click Apply to save your changes. LTE6100 User’s Guide...
  • Page 45: Routing

    (R1). You create one static route to connect to services offered by your ISP behind router R2. You create another static route to communicate with a separate network behind a router R3 connected to the LAN. Figure 21 Example of Static Routing Topology LTE6100 User’s Guide...
  • Page 46: Configuring Static Route

    This indicates which interface handles the traffic forwarded by this route. Modify Click the Edit icon to go to the screen where you can set up a static route on the LTE Device. Click the Delete icon to remove a static route from the LTE Device. LTE6100 User’s Guide...
  • Page 47: Add/Edit Static Route

    If you want to configure Bound Interface, select the check box and choose an interface through which the traffic is sent. Apply Click Apply to save your changes. Back Click Back to exit this screen without saving. LTE6100 User’s Guide...
  • Page 48 Chapter 6 Routing LTE6100 User’s Guide...
  • Page 49: Quality Of Service (Qos)

    CoS (class of service) is a way of managing traffic in a network by grouping similar types of traffic together and treating each type as a class. You can use CoS to give different priorities to different packet types. LTE6100 User’s Guide...
  • Page 50: The Qos General Screen

    Give high priority to voice and video to make them run more smoothly. Similarly, give low priority to many large file downloads so that they do not reduce the quality of other applications. Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. LTE6100 User’s Guide...
  • Page 51: The Queue Setup Screen

    This shows the maximum transmission rate allowed for traffic on this queue. (kbps) Modify Click the Edit icon to edit the queue. Click the Delete icon to delete an existing queue. Note that subsequent rules move up by one when you take this action. LTE6100 User’s Guide...
  • Page 52: Add/Edit A Qos Queue

    You can give different priorities to traffic that the LTE Device forwards out through the WAN interface. Give high priority to voice and video to make them run more smoothly. Similarly, give low priority to many large file downloads so that they do not reduce the quality of other applications. LTE6100 User’s Guide...
  • Page 53 This is the name of the queue in which traffic of this classifier is put. Modify Click the Edit icon to edit the classifier. Click the Delete icon to delete an existing classifier. Note that subsequent rules move up by one when you take this action. LTE6100 User’s Guide...
  • Page 54: Add/Edit Qos Class

    Select an existing number for where you want to put this classifier to move the classifier to Order the number you selected after clicking Apply. Select Last to put this rule in the back of the classifier list. LTE6100 User’s Guide...
  • Page 55 00:13:49:12:34:56 matches this criteria. IP Address Select the check box and enter the destination IP address in dotted decimal notation. A blank source IP address means any source IP address. IP Subnet Enter the destination subnet mask. Mask LTE6100 User’s Guide...
  • Page 56: The Qos Monitor Screen

    Click Back to return to the previous screen without saving. 7.5 The QoS Monitor Screen To view the LTE Device’s QoS packet statistics, click Network Setting > QoS > Monitor. The screen appears as shown. Figure 29 Network Setting > QoS > Monitor LTE6100 User’s Guide...
  • Page 57: Qos Technical Reference

    64 service levels. The following figure illustrates the DS field. DSCP is backward compatible with the three precedence bits in the ToS octet so that non-DiffServ compliant, ToS-enabled network device will not conflict with the DSCP mapping. DSCP (6 bits) Unused (2 bits) LTE6100 User’s Guide...
  • Page 58 The DSCP value determines the forwarding behavior, the PHB (Per-Hop Behavior), that each packet gets across the DiffServ network. Based on the marking rule, different kinds of traffic can be marked for different kinds of forwarding. Resources can then be allocated according to the DSCP values and the configured policies. LTE6100 User’s Guide...
  • Page 59: Network Address Translation (Nat)

    (the inside local address) to another (the inside global address) before forwarding the packet to the WAN side. When the response comes back, NAT translates the destination address (the inside global address) back to the inside local address before forwarding it to the original inside host. LTE6100 User’s Guide...
  • Page 60: The Port Forwarding Screen

    (C in the example). You assign the LAN IP addresses and the ISP assigns the WAN IP address. The NAT network appears as a single host on the Internet. Figure 30 Multiple Servers Behind NAT Example A=10.0.0.33 B=10.0.0.34 10.0.0.1 IP Address assigned by ISP C=10.0.0.35 D=10.0.0.36 LTE6100 User’s Guide...
  • Page 61: The Port Forwarding Screen

    Click the Delete icon to delete an existing port forwarding rule. Note that subsequent address mapping rules move up by one when you take this action. Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. LTE6100 User’s Guide...
  • Page 62: The Port Forwarding Edit Screen

    Enter the inside IP address of the virtual server here. Address Protocol Select the protocol supported by this virtual server. Choices are TCP, UDP, or TCP/UDP. Apply Click Apply to save your changes. Back Click Back to return to the previous screen without saving. LTE6100 User’s Guide...
  • Page 63: The Dmz Screen

    8.4 The Sessions Screen Use the Sessions screen to limit the number of concurrent NAT sessions each client can use. Click Network Setting > NAT > Sessions to display the following screen. Figure 34 Network Setting > NAT > Sessions LTE6100 User’s Guide...
  • Page 64: Technical Reference

    In the simplest form, NAT changes the source IP address in a packet received from a subscriber (the inside local address) to another (the inside global address) before forwarding the packet to the WAN side. When the response comes back, NAT translates the destination address (the inside LTE6100 User’s Guide...
  • Page 65: How Nat Works

    Figure 35 How NAT Works NAT Table Inside Local Inside Global IP Address IP Address 192.168.1.10 IGA 1 192.168.1.13 192.168.1.11 IGA 2 192.168.1.12 IGA 3 192.168.1.13 IGA 4 192.168.1.12 192.168.1.10 IGA1 Inside Local Inside Global Address (ILA) Address (IGA) 192.168.1.11 192.168.1.10 LTE6100 User’s Guide...
  • Page 66 Chapter 8 Network Address Translation (NAT) LTE6100 User’s Guide...
  • Page 67: Dynamic Dns

    IP address as yourhost.dyndns.org. This feature is useful if you want to be able to use, for example, www.yourhost.dyndns.org and still reach your hostname. If you have a private WAN IP address, then you cannot use Dynamic DNS. LTE6100 User’s Guide...
  • Page 68: The Dynamic Dns Screen

    You can specify up to two host names in the field separated by a comma (","). User Name Type your user name. Password Type the password assigned to you. Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. LTE6100 User’s Guide...
  • Page 69: Firewall

    • Use the Access Control screen to view and configure incoming/outgoing filtering rules (Section 10.4 on page 73). • Use the DoS screen to enable or disable Denial of Service (DoS) protection (Section 10.4 on page 73). LTE6100 User’s Guide...
  • Page 70: What You Need To Know

    Internet. ICMP uses Internet Protocol (IP) datagrams, but the messages are processed by the TCP/IP software and directly apparent to the application user. Finding Out More Section 10.6 on page 76 for advanced technical information on firewall. LTE6100 User’s Guide...
  • Page 71: The General Screen

    Select High to have the firewall only allow Telnet, FTP, HTTP, HTTPS, DNS, POP3, and SMTP traffic sent from the LAN to the WAN. Other traffic will be blocked. Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. LTE6100 User’s Guide...
  • Page 72: The Services Screen

    Firewall > Access Control > Add New ACL Rule/Edit screen. To access this screen, click Security > Firewall > Services and then the Add New Service Entry button. Figure 40 Security > Firewall > Services > Add New Service Entry LTE6100 User’s Guide...
  • Page 73: The Access Control Screen

    This displays the destination IP addresses to which this rule applies. Please note that a blank destination address is equivalent to Any. Services This displays the protocol type and a port range that define the service to which this rule applies. LTE6100 User’s Guide...
  • Page 74: The Add New Acl Rule/Edit Screen

    Destination Select Single or Range depending on whether you want to enter a single or a range of Address Type destination IP address(es) to which the ACL rule applies. Select Any to indicate any destination IP address. LTE6100 User’s Guide...
  • Page 75: The Dos Screen

    Click Back to exit this screen without saving your changes. 10.5 The DoS Screen Click Security > Firewall > DoS to display the following screen. Use this screen to enable or disable Denial of Service (DoS) protection. Figure 43 Security > Firewall > DoS LTE6100 User’s Guide...
  • Page 76: Firewall Technical Reference

    Is it possible to modify the rule to be more specific? For example, if IRC is blocked for all users, will a rule that blocks just certain users be more effective? LTE6100 User’s Guide...
  • Page 77 Internet users may be able to connect to computers with running FTP servers. Does this rule conflict with any existing rules? Once these questions have been answered, adding rules is simply a matter of entering the information into the correct fields in the web configurator screens. LTE6100 User’s Guide...
  • Page 78 Chapter 10 Firewall LTE6100 User’s Guide...
  • Page 79: Mac Filter

    Use the MAC Filter screen to allow wireless and LAN clients access to the LTE Device. To change your LTE Device’s MAC filter settings, click Security > MAC Filter. The screen appears as shown. Figure 44 Security > MAC Filter LTE6100 User’s Guide...
  • Page 80 LTE Device in these address fields. Enter the MAC addresses in a valid MAC address format, that is, six hexadecimal character pairs, for example, 12:34:56:78:9a:bc. Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. LTE6100 User’s Guide...
  • Page 81: Parental Control

    This shows the MAC address of the LAN user’s computer to which this rule applies. User (MAC) Internet Access This shows the day(s) and time on which parental control is enabled. Schedule Network This shows whether the network service is configured. If not, None will be shown. Service LTE6100 User’s Guide...
  • Page 82: Add/Edit A Parental Control Rule

    The following table describes the fields in this screen. Table 35 Add/Edit Parental Control Rule LABEL DESCRIPTION General Active Select the checkbox to activate this parental control rule. Parental Control Enter a descriptive name for the rule. Profile Name LTE6100 User’s Guide...
  • Page 83 Keyword LTE Device blocks access. Click Delete to remove it. Apply Click this button to save your settings back to the LTE Device. Back Click this button to return to the previous screen without saving any changes. LTE6100 User’s Guide...
  • Page 84 Chapter 12 Parental Control LTE6100 User’s Guide...
  • Page 85: Vpn

    The following figure helps explain the main fields in the web configurator. Figure 47 IPSec Fields Summary Remote Network Local Network Remote IPSec Router VPN Tunnel Remote IP Address Local IP Address Click Security > VPN to open this screen as shown next. Figure 48 IPSec VPN LTE6100 User’s Guide...
  • Page 86 Enter the name of the VPN connection. Local Address This displays the IP address of the LTE Device. Remote Address This displays the IP address of the remote IPSec router. IPSec Algorithm This displays the encryption algorithm being used for the VPN connection. LTE6100 User’s Guide...
  • Page 87: Ipsec Vpn: Add

    Use these settings. Click Security > VPN > Add New Tunnel to open this screen as shown next. Figure 49 IPSec VPN: Add This screen contains the following fields: Table 37 IPSec VPN: Add LABEL DESCRIPTION IPSEC Setup Active Select Active to activate this VPN policy. LTE6100 User’s Guide...
  • Page 88 Gateway Address Local ID Select IP to identify the LTE Device by its IP address. Select DNS to identify this LTE Device by a domain name. Select E-mail to identify this LTE Device by an e-mail address. LTE6100 User’s Guide...
  • Page 89 16 to 62 character range for the key. For example, in "0x0123456789ABCDEF", “0x” denotes that the key is hexadecimal and “0123456789ABCDEF” is the key itself. Advanced Setting - Phase 1 LTE6100 User’s Guide...
  • Page 90 Longer keys require more processing power, resulting in increased latency and decreased throughput. Authentication Select which hash algorithm to use to authenticate packet data. Choices are Algorithm MD5, SHA1, SHA2-256 and SHA2-512. SHA is generally considered stronger than MD5, but it is also slower. LTE6100 User’s Guide...
  • Page 91: The Monitor Screen

    This displays if the VPN policy is connected. Tunnel Name Enter the name of the VPN connection. IPSec Algorithm This displays the encryption algorithm being used for the VPN connection. Refresh Click this button to refresh the information on the screen. LTE6100 User’s Guide...
  • Page 92: Technical Reference

    The Authentication Algorithms, HMAC-MD5 (RFC 2403) and HMAC-SHA-1 (RFC 2404, provide an authentication mechanism for the AH and ESP protocols. Key Management Key management allows you to determine whether to use IKE (ISAKMP) or manual key configuration in order to set up a VPN. LTE6100 User’s Guide...
  • Page 93: Encapsulation

    • Outside header: The outside IP header contains the destination IP address of the VPN gateway. • Inside header: The inside IP header contains the destination IP address of the final system behind the VPN gateway. The security protocol appears after the outer IP header and before the inside IP header. LTE6100 User’s Guide...
  • Page 94: Ike Phases

    IPSec SA lifetime period expires. If an IPSec SA times out, then the IPSec router must renegotiate the SA the next time someone attempts to send traffic. 13.3.4 Negotiation Mode The phase 1 Negotiation Mode you select determines how the Security Association (SA) will be established for each connection through IKE negotiations. LTE6100 User’s Guide...
  • Page 95: Ipsec And Nat

    NAT device between the IPSec endpoints rewrites the source or destination address. As a result, the VPN device at the receiving end finds a mismatch between the hash value and the data and assumes that the data has been maliciously altered. LTE6100 User’s Guide...
  • Page 96: Id Type And Content

    94), the ID type and content are encrypted to provide identity protection. In this case the LTE Device can distinguish between different incoming SAs that connect from remote IPSec routers that have dynamic WAN IP addresses. The LTE Device can LTE6100 User’s Guide...
  • Page 97: Id Type And Content Examples

    A pre-shared key identifies a communicating party during a phase 1 IKE negotiation (see Section 13.3.3 on page 94 for more on IKE phases). It is called “pre-shared” because you have to share it with another party before you can communicate with them over a secure connection. LTE6100 User’s Guide...
  • Page 98: Diffie-Hellman (Dh) Key Groups

    Diffie-Hellman is used within IKE SA setup to establish session keys. Upon completion of the Diffie-Hellman exchange, the two peers have a shared secret, but the IKE SA is not authenticated. For authentication, use pre-shared keys. LTE6100 User’s Guide...
  • Page 99: Logs

    Critical (CRIT): The system condition is critical. Error (ERROR): There is an error condition on the system. Warning (WARNING): There is a warning condition on the system. Notice (NOTICE): There is a normal but significant condition on the system. LTE6100 User’s Guide...
  • Page 100: The System Log Screen

    This field displays the date and time the log was recorded. Level This field displays the severity level of the logs that the device is to send to this syslog server. Message This field states the reason for the log. LTE6100 User’s Guide...
  • Page 101: Traffic Status

    Status This shows the number of bytes received and sent through the WAN interface of the LTE Device. Refresh Interval Select how often you want the LTE Device to update this screen from the drop-down list box. LTE6100 User’s Guide...
  • Page 102: The Lan Status Screen

    This indicates the number of bytes received on this interface. Interface This shows the LAN interface. Sent (Packet) Data This indicates the number of transmitted packets on this interface. Error This indicates the number of frames with errors transmitted on this interface. LTE6100 User’s Guide...
  • Page 103: The Nat Status Screen

    This shows the name of the client. IP Address This shows the IP address of the client. MAC Address This shows the MAC address of the client. No. of Open This shows the number of NAT sessions used by the client. Session LTE6100 User’s Guide...
  • Page 104 Chapter 15 Traffic Status LTE6100 User’s Guide...
  • Page 105: User Account

    (*) for each character you type. After you change the password, use the new password to access the LTE Device. Retype to Type the new password again for confirmation. Confirm Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. LTE6100 User’s Guide...
  • Page 106 Chapter 16 User Account LTE6100 User’s Guide...
  • Page 107: Remote Mgmt

    Select the Enable check box for the corresponding services that you want to allow access to the LTE Device from the LAN. Select the Enable check box for the corresponding services that you want to allow access to the LTE Device from the WAN. LTE6100 User’s Guide...
  • Page 108 You may change the server port number for a service if needed, however you must use the same port number in order to use that service for remote management. Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. LTE6100 User’s Guide...
  • Page 109: System

    In Windows XP, click start, My Computer, View system information and then click the Computer Name tab. Note the entry in the Full computer name field and enter it as the LTE Device System Name. Click Maintenance > System to open the following screen. Figure 61 Maintenance > System LTE6100 User’s Guide...
  • Page 110 (not recommended). Apply Click this to save your changes back to the LTE Device. Cancel Click this to begin configuring this screen afresh. LTE6100 User’s Guide...
  • Page 111: Time Setting

    Check with your ISP/network administrator if you are unsure of this information. Time Zone Choose the time zone of your location. This will set the time difference between your time zone and Greenwich Mean Time (GMT). LTE6100 User’s Guide...
  • Page 112 In Germany for instance, you would type 2 because Germany's time zone is one hour ahead of GMT or UTC (GMT+1). Apply Click Apply to save your changes. Reset Click Reset to begin configuring this screen afresh. LTE6100 User’s Guide...
  • Page 113: Log Setting

    The LTE Device sends a log to an external syslog server. Select the Enable check box to enable syslog logging. Syslog Server Enter the server name or IP address of the syslog server that will log the selected categories of logs. LTE6100 User’s Guide...
  • Page 114 Log Level Select the severity level of logs that you want to record. If you want to record all logs, select ALL. Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. LTE6100 User’s Guide...
  • Page 115: Firmware Upgrade

    Click this to find the .bin file you want to upload. Remember that you must decompress compressed (.zip) files before you can upload them. Upload Click this to begin the upload process. This process may take up to three minutes. LTE6100 User’s Guide...
  • Page 116 After two minutes, log in again and check your new firmware version in the Status screen. If the upload was not successful, an error screen will appear. Click OK to go back to the Firmware Upgrade screen. Figure 67 Error Message LTE6100 User’s Guide...
  • Page 117: Backup/Restore

    The backup configuration file will be useful in case you need to return to your previous settings. Click Backup to save the LTE Device’s current configuration to your computer. LTE6100 User’s Guide...
  • Page 118 IP address (192.168.1.1). See Appendix B on page 137 for details on how to set up your computer’s IP address. If the upload was not successful, an error screen will appear. Click OK to go back to the Configuration screen. LTE6100 User’s Guide...
  • Page 119: The Reboot Screen

    System restart allows you to reboot the LTE Device remotely without turning the power off. You may need to do this if the LTE Device hangs, for example. Click Maintenance > Reboot. Click the Reboot button to have the LTE Device reboot. This does not affect the LTE Device's configuration. LTE6100 User’s Guide...
  • Page 120 Chapter 22 Backup/Restore LTE6100 User’s Guide...
  • Page 121: Diagnostic

    Type the IP address of a computer that you want to ping in order to test a connection. Click Ping and the ping statistics will show in the diagnostic . TraceRoute Click this button to perform the traceroute function. This determines the path a packet takes to the specified host. LTE6100 User’s Guide...
  • Page 122 Chapter 23 Diagnostic LTE6100 User’s Guide...
  • Page 123: Troubleshooting

    Make sure you understand the normal behavior of the LED. See Section 1.5 on page Check the hardware connections. See the Quick Start Guide. Inspect your cables for damage. Contact the vendor to replace any damaged cables. Turn the LTE Device off and on. LTE6100 User’s Guide...
  • Page 124: Lte Device Access And Login

    Make sure your Internet browser does not block pop-up windows and has JavaScript and Java enabled. See Appendix C on page 167. Reset the device to its factory defaults, and try to access the LTE Device with the default IP address. See Section 1.6 on page LTE6100 User’s Guide...
  • Page 125: Internet Access

    I cannot access the Internet anymore. I had access to the Internet (with the LTE Device), but my Internet connection is not available anymore. Check the hardware connections, and make sure the LEDs are behaving as expected. See the Quick Start Guide and Section 1.5 on page LTE6100 User’s Guide...
  • Page 126: Upnp

    The Local Area Connection icon for UPnP disappears in the screen. Restart your computer. I cannot open special applications such as white board, file transfer and video when I use the MSN messenger. Wait more than three minutes. Restart the applications. LTE6100 User’s Guide...
  • Page 127: Appendix A Ip Addresses And Subnetting

    192.168.1.1). Each of these four parts is known as an octet. An octet is an eight-digit binary number (for example 11000000, which is 192 in decimal notation). Therefore, each octet has a possible range of 00000000 to 11111111 in binary, or 0 to 255 in decimal. LTE6100 User’s Guide...
  • Page 128 Host ID 00000010 By convention, subnet masks always consist of a continuous sequence of ones beginning from the leftmost bit of the mask, followed by a continuous sequence of zeros, for a total number of 32 bits. LTE6100 User’s Guide...
  • Page 129 This is usually specified by writing a “/” followed by the number of bits in the mask after the address. For example, 192.1.1.0 /25 is equivalent to saying 192.1.1.0 with subnet mask 255.255.255.128. LTE6100 User’s Guide...
  • Page 130 You can “borrow” one of the host ID bits to divide the network 192.168.1.0 into two separate sub- networks. The subnet mask is now 25 bits (255.255.255.128 or /25). The “borrowed” host ID bit can have a value of either 0 or 1, allowing two subnets; 192.168.1.0 /25 and 192.168.1.128 /25. LTE6100 User’s Guide...
  • Page 131 Table 61 Subnet 1 LAST OCTET BIT IP/SUBNET MASK NETWORK NUMBER VALUE IP Address (Decimal) 192.168.1. IP Address (Binary) 11000000.10101000.00000001. 00000000 Subnet Mask (Binary) 11111111.11111111.11111111. 11000000 LTE6100 User’s Guide...
  • Page 132 11111111.11111111.11111111. 11000000 Subnet Address: Lowest Host ID: 192.168.1.193 192.168.1.192 Broadcast Address: Highest Host ID: 192.168.1.254 192.168.1.255 Example: Eight Subnets Similarly, use a 27-bit mask to create eight subnets (000, 001, 010, 011, 100, 101, 110 and 111). LTE6100 User’s Guide...
  • Page 133 NO. SUBNETS HOST BITS SUBNET 255.255.128.0 (/17) 32766 255.255.192.0 (/18) 16382 255.255.224.0 (/19) 8190 255.255.240.0 (/20) 4094 255.255.248.0 (/21) 2046 255.255.252.0 (/22) 1022 255.255.254.0 (/23) 255.255.255.0 (/24) 255.255.255.128 (/25) 255.255.255.192 (/26) 1024 255.255.255.224 (/27) 2048 255.255.255.240 (/28) 4096 LTE6100 User’s Guide...
  • Page 134 Regardless of your particular situation, do not create an arbitrary IP address; always follow the guidelines above. For more information on address assignment, please refer to RFC 1597, Address Allocation for Private Internets and RFC 1466, Guidelines for Management of IP Address Space. LTE6100 User’s Guide...
  • Page 135 WAN addresses must be on different subnets. In the following example, the LAN and WAN are on the same subnet. The LAN computers cannot access the Internet because the router cannot route between networks. Figure 77 Conflicting Computer IP Addresses Example LTE6100 User’s Guide...
  • Page 136 LAN port both use 192.168.1.1 as the IP address. The computer cannot access the Internet. This problem can be solved by assigning a different IP address to the computer or the router’s LAN port. Figure 78 Conflicting Computer and Router IP Addresses Example LTE6100 User’s Guide...
  • Page 137: Appendix B Setting Up Your Computer's Ip Address

    152 • Linux: Ubuntu 8 (GNOME) page 156 • Linux: openSUSE 10.3 (KDE) page 160 Windows XP/NT/2000 The following example uses the default Windows XP display theme but can also apply to Windows 2000 and Windows NT. LTE6100 User’s Guide...
  • Page 138 Appendix B Setting Up Your Computer’s IP Address Click Start > Control Panel. Figure 79 Windows XP: Start Menu In the Control Panel, click the Network Connections icon. Figure 80 Windows XP: Control Panel LTE6100 User’s Guide...
  • Page 139 Right-click Local Area Connection and then select Properties. Figure 81 Windows XP: Control Panel > Network Connections > Properties On the General tab, select Internet Protocol (TCP/IP) and then click Properties. Figure 82 Windows XP: Local Area Connection Properties LTE6100 User’s Guide...
  • Page 140 In the Command Prompt window, type "ipconfig" and then press [ENTER]. You can also go to Start > Control Panel > Network Connections, right-click a network connection, click Status and then click the Support tab to view your IP address and connection information. LTE6100 User’s Guide...
  • Page 141 Click Start > Control Panel. Figure 84 Windows Vista: Start Menu In the Control Panel, click the Network and Internet icon. Figure 85 Windows Vista: Control Panel Click the Network and Sharing Center icon. Figure 86 Windows Vista: Network And Internet LTE6100 User’s Guide...
  • Page 142 Figure 87 Windows Vista: Network and Sharing Center Right-click Local Area Connection and then select Properties. Figure 88 Windows Vista: Network and Sharing Center Note: During this procedure, click Continue whenever Windows displays a screen saying that it needs your permission to continue. LTE6100 User’s Guide...
  • Page 143 Appendix B Setting Up Your Computer’s IP Address Select Internet Protocol Version 4 (TCP/IPv4) and then select Properties. Figure 89 Windows Vista: Local Area Connection Properties LTE6100 User’s Guide...
  • Page 144 In the Command Prompt window, type "ipconfig" and then press [ENTER]. You can also go to Start > Control Panel > Network Connections, right-click a network connection, click Status and then click the Support tab to view your IP address and connection information. LTE6100 User’s Guide...
  • Page 145 Figure 91 Windows 7: Start Menu In the Control Panel, click View network status and tasks under the Network and Internet category. Figure 92 Windows 7: Control Panel Click Change adapter settings. Figure 93 Windows 7: Network And Sharing Center LTE6100 User’s Guide...
  • Page 146 Appendix B Setting Up Your Computer’s IP Address Double click Local Area Connection and then select Properties. Figure 94 Windows 7: Local Area Connection Status Note: During this procedure, click Continue whenever Windows displays a screen saying that it needs your permission to continue. LTE6100 User’s Guide...
  • Page 147 Appendix B Setting Up Your Computer’s IP Address Select Internet Protocol Version 4 (TCP/IPv4) and then select Properties. Figure 95 Windows 7: Local Area Connection Properties LTE6100 User’s Guide...
  • Page 148 Click OK to close the Internet Protocol (TCP/IP) Properties window. Click OK to close the Local Area Connection Properties window. Verifying Settings Click Start > All Programs > Accessories > Command Prompt. In the Command Prompt window, type "ipconfig" and then press [ENTER]. LTE6100 User’s Guide...
  • Page 149 Figure 97 Windows 7: Internet Protocol Version 4 (TCP/IPv4) Properties Mac OS X: 10.3 and 10.4 The screens in this section are from Mac OS X 10.4 but can also apply to 10.3. Click Apple > System Preferences. Figure 98 Mac OS X 10.4: Apple Menu LTE6100 User’s Guide...
  • Page 150 In the System Preferences window, click the Network icon. Figure 99 Mac OS X 10.4: System Preferences When the Network preferences pane opens, select Built-in Ethernet from the network connection type list, and then click Configure. Figure 100 Mac OS X 10.4: Network Preferences LTE6100 User’s Guide...
  • Page 151 Figure 101 Mac OS X 10.4: Network Preferences > TCP/IP Tab. For statically assigned settings, do the following: • From the Configure IPv4 list, select Manually. • In the IP Address field, type your IP address. • In the Subnet Mask field, type your subnet mask. LTE6100 User’s Guide...
  • Page 152 Check your TCP/IP properties by clicking Applications > Utilities > Network Utilities, and then selecting the appropriate Network Interface from the Info tab. Figure 103 Mac OS X 10.4: Network Utility Mac OS X: 10.5 The screens in this section are from Mac OS X 10.5. LTE6100 User’s Guide...
  • Page 153 Appendix B Setting Up Your Computer’s IP Address Click Apple > System Preferences. Figure 104 Mac OS X 10.5: Apple Menu In System Preferences, click the Network icon. Figure 105 Mac OS X 10.5: Systems Preferences LTE6100 User’s Guide...
  • Page 154 From the Configure list, select Using DHCP for dynamically assigned settings. For statically assigned settings, do the following: • From the Configure list, select Manually. • In the IP Address field, enter your IP address. • In the Subnet Mask field, enter your subnet mask. LTE6100 User’s Guide...
  • Page 155 Appendix B Setting Up Your Computer’s IP Address • In the Router field, enter the IP address of your LTE Device. Figure 107 Mac OS X 10.5: Network Preferences > Ethernet Click Apply and close the window. LTE6100 User’s Guide...
  • Page 156 Note: Make sure you are logged in as the root administrator. Follow the steps below to configure your computer IP address in GNOME: Click System > Administration > Network. Figure 109 Ubuntu 8: System > Administration Menu LTE6100 User’s Guide...
  • Page 157 Figure 110 Ubuntu 8: Network Settings > Connections In the Authenticate window, enter your admin account name and password then click the Authenticate button. Figure 111 Ubuntu 8: Administrator Account Authentication LTE6100 User’s Guide...
  • Page 158 • In the Configuration list, select Static IP address if you have a static IP address. Fill in the IP address, Subnet mask, and Gateway address fields. Click OK to save the changes and close the Properties dialog box and return to the Network Settings screen. LTE6100 User’s Guide...
  • Page 159 If you know your DNS server IP address(es), click the DNS tab in the Network Settings window and then enter the DNS server information in the fields provided. Figure 114 Ubuntu 8: Network Settings > DNS Click the Close button to apply the changes. LTE6100 User’s Guide...
  • Page 160 The following screens use the default openSUSE 10.3 installation. Note: Make sure you are logged in as the root administrator. Follow the steps below to configure your computer IP address in the KDE: LTE6100 User’s Guide...
  • Page 161 Click K Menu > Computer > Administrator Settings (YaST). Figure 116 openSUSE 10.3: K Menu > Computer Menu When the Run as Root - KDE su dialog opens, enter the admin password and click OK. Figure 117 openSUSE 10.3: K Menu > Computer Menu LTE6100 User’s Guide...
  • Page 162 Figure 118 openSUSE 10.3: YaST Control Center When the Network Settings window opens, click the Overview tab, select the appropriate connection Name from the list, and then click the Configure button. Figure 119 openSUSE 10.3: Network Settings LTE6100 User’s Guide...
  • Page 163 Select Dynamic Address (DHCP) if you have a dynamic IP address. Select Statically assigned IP Address if you have a static IP address. Fill in the IP address, Subnet mask, and Hostname fields. Click Next to save the changes and close the Network Card Setup window. LTE6100 User’s Guide...
  • Page 164 Click Finish to save your settings and close the window. Verifying Settings Click the KNetwork Manager icon on the Task bar to check your TCP/IP properties. From the Options sub-menu, select Show Connection Information. Figure 122 openSUSE 10.3: KNetwork Manager LTE6100 User’s Guide...
  • Page 165 Appendix B Setting Up Your Computer’s IP Address When the Connection Status - KNetwork Manager window opens, click the Statistics tab to see if your connection is working properly. Figure 123 openSUSE: Connection Status - KNetwork Manager LTE6100 User’s Guide...
  • Page 166 Appendix B Setting Up Your Computer’s IP Address LTE6100 User’s Guide...
  • Page 167: Appendix C Pop-Up Windows, Javascript And Java Permissions

    In Internet Explorer, select Tools, Pop-up Blocker and then select Turn Off Pop-up Blocker. Figure 124 Pop-up Blocker You can also check if pop-up blocking is disabled in the Pop-up Blocker section in the Privacy tab. In Internet Explorer, select Tools, Internet Options, Privacy. LTE6100 User’s Guide...
  • Page 168 Click Apply to save this setting. Enable Pop-up Blockers with Exceptions Alternatively, if you only want to allow pop-up windows from your device, see the following steps. In Internet Explorer, select Tools, Internet Options and then the Privacy tab. LTE6100 User’s Guide...
  • Page 169 Select Settings…to open the Pop-up Blocker Settings screen. Figure 126 Internet Options: Privacy Type the IP address of your device (the web page that you do not want to have blocked) with the prefix “http://”. For example, http://192.168.167.1. LTE6100 User’s Guide...
  • Page 170 Figure 127 Pop-up Blocker Settings Click Close to return to the Privacy screen. Click Apply to save this setting. JavaScript If pages of the web configurator do not display properly in Internet Explorer, check that JavaScript are allowed. LTE6100 User’s Guide...
  • Page 171 Figure 128 Internet Options: Security Click the Custom Level... button. Scroll down to Scripting. Under Active scripting make sure that Enable is selected (the default). Under Scripting of Java applets make sure that Enable is selected (the default). LTE6100 User’s Guide...
  • Page 172 Figure 129 Security Settings - Java Scripting Java Permissions From Internet Explorer, click Tools, Internet Options and then the Security tab. Click the Custom Level... button. Scroll down to Microsoft VM. Under Java permissions make sure that a safety level is selected. LTE6100 User’s Guide...
  • Page 173 Click OK to close the window. Figure 130 Security Settings - Java JAVA (Sun) From Internet Explorer, click Tools, Internet Options and then the Advanced tab. Make sure that Use Java 2 for <applet> under Java (Sun) is selected. LTE6100 User’s Guide...
  • Page 174 Mozilla Firefox 2.0 screens are used here. Screens for other versions may vary. You can enable Java, JavaScript and pop-ups in one screen. Click Tools, then click Options in the screen that appears. Figure 132 Mozilla Firefox: Tools > Options LTE6100 User’s Guide...
  • Page 175 Appendix C Pop-up Windows, JavaScript and Java Permissions Click Content.to show the screen below. Select the check boxes as shown in the following screen. Figure 133 Mozilla Firefox Content Security LTE6100 User’s Guide...
  • Page 176 Appendix C Pop-up Windows, JavaScript and Java Permissions LTE6100 User’s Guide...
  • Page 177: Appendix D Common Services

    H.323 1720 NetMeeting uses this protocol. HTTP Hyper Text Transfer Protocol - a client/server protocol for the world wide web. HTTPS HTTPS is a secured http session often used in e- commerce. LTE6100 User’s Guide...
  • Page 178 UNIX systems and network servers. TCP/UDP Secure Shell Remote Login Program. STRM WORKS 1558 Stream Works Protocol. SYSLOG Syslog allows you to send system logs to a UNIX server. LTE6100 User’s Guide...
  • Page 179 TFTP Trivial File Transfer Protocol is an Internet file transfer protocol similar to FTP, but uses the UDP (User Datagram Protocol) rather than TCP (Transmission Control Protocol). VDOLIVE 7000 Another videoconferencing solution. LTE6100 User’s Guide...
  • Page 180 Appendix D Common Services LTE6100 User’s Guide...
  • Page 181: Appendix E Legal Information

    ZyXEL Communications Corporation. Published by ZyXEL Communications Corporation. All rights reserved.
  • Page 182 This Class B digital apparatus complies with Canadian ICES-003. Cet appareil numérique de la classe B est conforme à la norme NMB-003 du Canada. Viewing Certifications Go to http://www.zyxel.com. LTE6100 User’s Guide...
  • Page 183: Zyxel Limited Warranty

    Your product is marked with this symbol, which is known as the WEEE mark. WEEE stands for Waste Electronics and Electrical Equipment. It means that used electrical and electronic products should not be mixed with general waste. Used electrical and electronic equipment should be treated separately. LTE6100 User’s Guide...
  • Page 184 Appendix E Legal Information LTE6100 User’s Guide...
  • Page 185: Index

    Dynamic Host Configuration Protocol, see DHCP Broadband DYNDNS wildcard certification notices Encapsulation viewing encapsulation client list configuration backup reset restoring copyright FCC interference statement firewalls configuration security firmware default LAN IP address Denials of Service, see DoS LTE6100 User’s Guide...
  • Page 186 IP Address Assignment IP pool IPSec algorithms architecture other documentation outside header IPSec VPN passwords client list MAC address ports Local Area Network, see LAN pre-shared key login product registration passwords logout automatic logs 99, 113 LTE6100 User’s Guide...
  • Page 187 Wide Area Network, see WAN service access control warnings static route Web Configurator status web configurator status indicators passwords subnet subnet mask subnetting syslog protocol severity levels system firmware passwords status System Info system name 27, 110 LTE6100 User’s Guide...
  • Page 188 Index LTE6100 User’s Guide...
  • Page 189 Index LTE6100 User’s Guide...

Table of Contents