Page 2
(See the wizard real time help for information on configuring each screen.) It also contains a connection diagram and package contents list. Note: It is recommended you use the Web Configurator to configure the LTE Device. LTE6101 User’s Guide...
2.2.3 Traffic Status ..........................22 2.2.4 User Account ...........................22 2.2.5 Navigation Panel ........................23 Part II: Technical Reference................25 Chapter 3 Connection Status and System Info ....................27 3.1 Overview ............................27 3.2 The Connection Status Screen ......................27 3.3 The System Info Screen ........................29 LTE6101 User’s Guide...
Page 6
5.7.6 WiFi Protected Setup (WPS) ....................59 Chapter 6 Home Networking ..........................67 6.1 Overview ............................67 6.1.1 What You Can Do in this Chapter ....................67 6.1.2 What You Need To Know ......................67 6.2 The LAN Setup Screen ........................69 6.3 The Static DHCP Screen ........................70 LTE6101 User’s Guide...
Page 7
9.5 Technical Reference ..........................92 9.5.1 NAT Definitions ........................92 9.5.2 What NAT Does ........................92 9.5.3 How NAT Works ........................93 Chapter 10 Dynamic DNS ............................95 10.1 Overview ............................95 10.1.1 What You Need To Know .......................95 10.2 The Dynamic DNS Screen ......................96 LTE6101 User’s Guide...
Page 8
14.3.1 IPSec Architecture .......................120 14.3.2 Encapsulation ........................121 14.3.3 IKE Phases .........................122 14.3.4 Negotiation Mode ........................122 14.3.5 IPSec and NAT ........................123 14.3.6 VPN, NAT, and NAT Traversal .....................123 14.3.7 ID Type and Content ......................124 14.3.8 Pre-Shared Key ........................125 LTE6101 User’s Guide...
Page 9
19.1.1 What You Need to Know ......................137 19.2 The System Screen ........................137 Chapter 20 Time Setting ............................139 20.1 Overview ............................139 20.2 The Time Setting Screen ......................139 Chapter 21 Log Setting ............................141 21.1 Overview ............................141 21.2 The Log Setting Screen ........................141 LTE6101 User’s Guide...
Page 10
25.6 UPnP .............................155 Appendix A IP Addresses and Subnetting..................157 Appendix B Setting Up Your Computer’s IP Address ..............167 Appendix C Pop-up Windows, JavaScript and Java Permissions ...........197 Appendix D Common Services......................207 Appendix E Legal Information......................211 Index ..............................215 LTE6101 User’s Guide...
Figure 1 LTE Device’s Internet Access Application 1.2.2 Wireless Connection By default, the wireless LAN (WLAN) is enabled on the LTE Device. Once Wireless is enabled, IEEE 802.11b/g/n compliant clients can wirelessly connect to the LTE Device to access network LTE6101 User’s Guide...
LTE Device sets up a WPS connection with the wireless device. You must activate WPS in the LTE Device and in another wireless device within two minutes of each other. See Section 5.7.6 on page 59 for more information. LTE6101 User’s Guide...
LTE Device. You could simply restore your last configuration. Write down any information your ISP provides you. 1.6 LEDs (Lights) The following graphic displays the labels of the LEDs. Figure 3 LEDs on the Top of the Device Figure 4 LEDs on the Ethernet Ports LTE6101 User’s Guide...
If you forget your password or cannot access the web configurator, you will need to use the RESET button at the back of the device to reload the factory-default configuration file. This means that you will lose all configurations that you had previously and the passwords will be reset to the defaults. LTE6101 User’s Guide...
Page 17
To set the device back to the factory default settings, press the RESET button for 5 seconds or until the POWER LED begins to blink and then release it. When the POWER LED begins to blink, the defaults have been restored and the device restarts. LTE6101 User’s Guide...
A password screen displays. Type “admin” as the default Username and “1234” as the default password to access the device’s Web Configurator. Click Login. If you have changed the password, enter your password and click Login. Figure 5 Password Screen LTE6101 User’s Guide...
Page 20
Apply; alternatively click Skip to proceed to the main menu if you do not want to change the password now. Figure 6 Change Password Screen The Connection Status screen appears. Figure 7 Connection Status Click System Info to display the System Info screen, where you can view the LTE Device’s interface and system information. LTE6101 User’s Guide...
As illustrated above, the main screen is divided into these parts: • A - title bar • B - main window • C - navigation panel 2.2.1 Title Bar The title bar shows the following icon in the upper right corner. LTE6101 User’s Guide...
WAN, LAN interfaces and NAT. See Chapter 19 on page 137 for more information. 2.2.4 User Account Use the Maintenance > User Accounts screen to configure system password for different user accounts. See Chapter 17 on page 133 for more information. LTE6101 User’s Guide...
Use this screen to activate/deactivate the firewall. Services Use this screen to view and configure services. Access Control Use this screen to view and configure filter rules for incoming and outgoing traffic. Use this screen to activate/deactivate Denial of Service (DoS) protection. LTE6101 User’s Guide...
Page 24
Use this screen to backup and restore your device’s configuration Restore (settings) or reset the factory default settings. Reboot Reboot Use this screen to reboot the LTE Device without turning the power off. Diagnostic Ping/TraceRoute Use this screen to test the connections to other devices. LTE6101 User’s Guide...
Section 2.2.2 on page 22 for more information. 3.2 The Connection Status Screen Use this screen to view the network connection status of the device and its clients. A warning message appears if there is a connection problem. LTE6101 User’s Guide...
Page 28
In Icon View, if you want to view information about a client, click the client’s name and Info. Click the IP address if you want to change it. If you want to change the name or icon of the client, click Change name/icon. In List View, you can also view the client’s information. LTE6101 User’s Guide...
Table 3 System Info Screen LABEL DESCRIPTION Language Select the web configurator language from the drop-down list box. Refresh Interval Select how often you want the LTE Device to update this screen from the drop- down list box. Device Information LTE6101 User’s Guide...
Page 30
No SIM Card - you have not inserted a SIM card. SIM Card Error - other SIM card error. Signal Strength This displays the strength of the LTE connection that the LTE Device has with the base station which is also known as eNodeB or eNB. LTE6101 User’s Guide...
Page 31
Usually, this percentage should not increase much. If memory usage does get close to 100%, the LTE Device is probably becoming unstable, and you should restart the device. See Chapter 23 on page 147, or turn off the device (unplug the power) for a few seconds. LTE6101 User’s Guide...
Page 32
Chapter 3 Connection Status and System Info LTE6101 User’s Guide...
34). • Use the SIM screen to enter the PIN of your SIM card (Section 4.3 on page 36). 4.1.2 What You Need to Know The following terms and concepts may help as you read this chapter. LTE6101 User’s Guide...
Internet Setup Name This is the service name of the connection. This is the name of the LTE network to which the LTE Device will connect. IPv6/IPv4 Mode This shows whether the connection uses IPv6 or IPv4. LTE6101 User’s Guide...
Enter the MTU for this WAN interface in this field. NAT Enable Select this to activate NAT on the WAN. Apply as Select this option to have the LTE Device use the WAN interface of this connection as the Default system default gateway. Gateway LTE6101 User’s Guide...
Enter the PIN of your SIM card. Apply Click Apply to save your changes. Cancel Click Cancel to return to the previous screen without saving. 4.3.1 PUK Code Screen If the SIM card is locked, use this screen to enter the PUK code. LTE6101 User’s Guide...
The Single User Account feature can be enabled or disabled if you have either a dynamic or static IP. However the encapsulation method assigned influences your choices for IP address and default gateway. LTE6101 User’s Guide...
• An “infrastructure” type of network has one or more access points and one or more wireless clients. The wireless clients connect to the access points. • An “ad-hoc” type of network is one in which there is no access point. Wireless clients connect to one another in order to exchange information. LTE6101 User’s Guide...
Page 42
Channels available depend on your geographical area. You may have a choice of channels (for your region) so you should use a channel different from an adjacent AP (access point) to reduce interference. Interference occurs when radio signals from different access points overlap causing interference and degrading performance. LTE6101 User’s Guide...
LAN and you change the LTE Device’s SSID or security settings, you will lose your wireless connection when you press Apply to confirm. You must then change the wireless settings of your computer to match the LTE Device’s new settings. LTE6101 User’s Guide...
Page 44
Select 802.11g Only to allow only IEEE 802.11g compliant WLAN devices to associate with the LTE Device. Select 802.11n only in 2.4G band to allow only IEEE 802.11n compliant WLAN devices with the same frequency range (2.4 GHz) to associate with the LTE Device. LTE6101 User’s Guide...
(AP) to keep network communications private. Both the wireless stations and the access points must use the same WEP key. There are two types of WEP authentication namely, Open System (Static WEP) and Shared Key (Shared WEP). LTE6101 User’s Guide...
Page 46
Shared Key mode and have the correct WEP key. WEP Key Enter a WEP key that will be used to encrypt data. Both the LTE Device and the wireless stations must use the same WEP key for data transmission. LTE6101 User’s Guide...
AES provides superior security to TKIP. If the security mode is WPA-PSK2 and WPA-PSK Compatible is enabled, the encryption mode is set to TKIPAES MIX to allow both TKIP and AES types of security in your wireless network. LTE6101 User’s Guide...
The key must be the same on the external authentication server and your LTE Device. The key is not sent over the network. more.../hide Click more... to show more fields in this section. Click hide more to hide them. more LTE6101 User’s Guide...
AP to associate with, this is the name that is broadcast and seen in the wireless client utility. Security This field indicates the security mode of the SSID profile. Modify Click the Edit icon to configure the SSID profile. LTE6101 User’s Guide...
Or you can select No Security to allow any client to associate this network without any data encryption or authentication. Section 5.2.1 on page 45 for more details about this field. Apply Click Apply to save your changes. Back Click Back to exit this screen without saving. LTE6101 User’s Guide...
LTE Device) to your wireless network. This button may either be a physical button on the outside of device, or a menu button similar to the WPS button on this screen. Note: You must press the other wireless device’s WPS button within two minutes of pressing this button. LTE6101 User’s Guide...
This is the type of wireless security employed by the network. Apply Click Apply to save your changes. 5.5 The WMM Screen Use this screen to enable or disable Wi-Fi MultiMedia (WMM) wireless networks for multimedia applications. LTE6101 User’s Guide...
Page 53
Click this to increase battery life for battery-powered wireless clients. APSD uses a longer Automatic beacon interval when transmitting traffic that does not require a short packet exchange Power Save interval. Deliver (APSD) Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. LTE6101 User’s Guide...
Mon ~ Fri in the day column, and specify 8:00 ~ 18:00 in the time table. Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. 5.7 Technical Reference This section discusses wireless LANs in depth. For more information, see the appendix. LTE6101 User’s Guide...
A good way to come up with effective security keys, passwords and so on is to use obscure information that you personally will easily remember, and to enter it in a way that appears random LTE6101 User’s Guide...
Page 56
Some wireless devices, such as scanners, can detect wireless networks but cannot use wireless networks. These kinds of wireless devices might not have MAC addresses. Hexadecimal characters are 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, A, B, C, D, E, and F. LTE6101 User’s Guide...
• You must use different keys for different BSSs. If two wireless devices have different BSSIDs (they are in different BSSs), but have the same keys, they may hear each other’s communications (but not communicate with each other). • MBSSID should not replace but rather be used in conjunction with 802.1x security. LTE6101 User’s Guide...
PIN method. When you use the PIN method, you must enter the PIN from one device (usually the wireless client) into the second device (usually the Access Point or wireless router). Then, when WPS is activated LTE6101 User’s Guide...
Page 60
On a computer connected to the wireless client, try to connect to the Internet. If you can connect, WPS was successful. If you cannot connect, check the list of associated wireless clients in the AP’s configuration utility. If you see the wireless client in the list, WPS was successful. LTE6101 User’s Guide...
WPA-PSK or WPA2-PSK pre-shared key to the enrollee. Whether WPA-PSK or WPA2-PSK is used depends on the standards supported by the devices. If the registrar is already part of a network, it sends the existing information. If not, it generates the SSID and WPA(2)-PSK randomly. LTE6101 User’s Guide...
Page 62
This section shows how security settings are distributed in an example WPS setup. The following figure shows an example network. In step 1, both AP1 and Client 1 are unconfigured. When WPS is activated on both, they perform the handshake. In this example, AP1 LTE6101 User’s Guide...
Page 63
(it already has security information for the network). AP1 supplies the existing security information to Client 2. Figure 33 WPS: Example Network Step 2 REGISTRAR EXISTING CONNECTION CLIENT 1 ENROLLEE CLIENT 2 LTE6101 User’s Guide...
Page 64
(if the device supports this feature). Then, you can enter the key into the non-WPS device and join the network as normal (the non-WPS device must also support WPA-PSK or WPA2-PSK). LTE6101 User’s Guide...
Page 65
Check the MAC addresses of your wireless clients (usually printed on a label on the bottom of the device). If there is an unknown MAC address you can remove it or reset the AP. LTE6101 User’s Guide...
6.1.2.1 About LAN IP Address Similar to the way houses on a street share a common street name, so too do computers on a LAN share one common network number. This is known as an Internet Protocol address. LTE6101 User’s Guide...
Page 68
When a UPnP device joins a network, it announces its presence with a multicast message. For security reasons, the LTE Device allows multicast messages on the LAN only. All UPnP-enabled devices may communicate freely with each other without additional configuration. Disable UPnP if this is not your intention. LTE6101 User’s Guide...
IP Addressing Values IP Pool Starting This field specifies the first of the contiguous addresses in the IP address pool. Address Pool Size This field specifies the size, or count of the IP address pool. DNS Values LTE6101 User’s Guide...
The following table describes the labels in this screen. Table 22 Network Setting > Home Networking > Static DHCP LABEL DESCRIPTION Add new static Click this to add a new static DHCP entry. lease This is the index number of the entry. LTE6101 User’s Guide...
A UPnP device can dynamically join a network, obtain an IP address, convey its capabilities and learn about other devices on the network. In turn, a device can leave a network smoothly and automatically when it is no longer in use. LTE6101 User’s Guide...
Page 72
Select Enable to activate UPnP. Be aware that anyone could use a UPnP application to open the web configurator's login screen without entering the LTE Device's IP address (although you must still enter the password to access the web configurator). Apply Click Apply to save your changes. LTE6101 User’s Guide...
(R1). You create one static route to connect to services offered by your ISP behind router R2. You create another static route to communicate with a separate network behind a router R3 connected to the LAN. Figure 39 Example of Static Routing Topology LTE6101 User’s Guide...
This indicates which interface handles the traffic forwarded by this route. Modify Click the Edit icon to go to the screen where you can set up a static route on the LTE Device. Click the Delete icon to remove a static route from the LTE Device. LTE6101 User’s Guide...
If you want to configure Bound Interface, select the check box and choose an interface through which the traffic is sent. Apply Click Apply to save your changes. Back Click Back to exit this screen without saving. LTE6101 User’s Guide...
CoS (class of service) is a way of managing traffic in a network by grouping similar types of traffic together and treating each type as a class. You can use CoS to give different priorities to different packet types. LTE6101 User’s Guide...
Give high priority to voice and video to make them run more smoothly. Similarly, give low priority to many large file downloads so that they do not reduce the quality of other applications. Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. LTE6101 User’s Guide...
This shows the maximum transmission rate allowed for traffic on this queue. (kbps) Modify Click the Edit icon to edit the queue. Click the Delete icon to delete an existing queue. Note that subsequent rules move up by one when you take this action. LTE6101 User’s Guide...
You can give different priorities to traffic that the LTE Device forwards out through the WAN interface. Give high priority to voice and video to make them run more smoothly. Similarly, give low priority to many large file downloads so that they do not reduce the quality of other applications. LTE6101 User’s Guide...
Page 81
This is the name of the queue in which traffic of this classifier is put. Modify Click the Edit icon to edit the classifier. Click the Delete icon to delete an existing classifier. Note that subsequent rules move up by one when you take this action. LTE6101 User’s Guide...
Select an existing number for where you want to put this classifier to move the classifier to Order the number you selected after clicking Apply. Select Last to put this rule in the back of the classifier list. LTE6101 User’s Guide...
Page 83
00:13:49:12:34:56 matches this criteria. IP Address Select the check box and enter the destination IP address in dotted decimal notation. A blank source IP address means any source IP address. IP Subnet Enter the destination subnet mask. Mask LTE6101 User’s Guide...
Click Back to return to the previous screen without saving. 8.5 The QoS Monitor Screen To view the LTE Device’s QoS packet statistics, click Network Setting > QoS > Monitor. The screen appears as shown. Figure 47 Network Setting > QoS > Monitor LTE6101 User’s Guide...
64 service levels. The following figure illustrates the DS field. DSCP is backward compatible with the three precedence bits in the ToS octet so that non-DiffServ compliant, ToS-enabled network device will not conflict with the DSCP mapping. DSCP (6 bits) Unused (2 bits) LTE6101 User’s Guide...
Page 86
The DSCP value determines the forwarding behavior, the PHB (Per-Hop Behavior), that each packet gets across the DiffServ network. Based on the marking rule, different kinds of traffic can be marked for different kinds of forwarding. Resources can then be allocated according to the DSCP values and the configured policies. LTE6101 User’s Guide...
(the inside local address) to another (the inside global address) before forwarding the packet to the WAN side. When the response comes back, NAT translates the destination address (the inside global address) back to the inside local address before forwarding it to the original inside host. LTE6101 User’s Guide...
(C in the example). You assign the LAN IP addresses and the ISP assigns the WAN IP address. The NAT network appears as a single host on the Internet. Figure 48 Multiple Servers Behind NAT Example A=10.0.0.33 B=10.0.0.34 10.0.0.1 IP Address assigned by ISP C=10.0.0.35 D=10.0.0.36 LTE6101 User’s Guide...
Click the Delete icon to delete an existing port forwarding rule. Note that subsequent address mapping rules move up by one when you take this action. Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. LTE6101 User’s Guide...
Enter the inside IP address of the virtual server here. Address Protocol Select the protocol supported by this virtual server. Choices are TCP, UDP, or TCP/UDP. Apply Click Apply to save your changes. Back Click Back to return to the previous screen without saving. LTE6101 User’s Guide...
9.4 The Sessions Screen Use the Sessions screen to limit the number of concurrent NAT sessions each client can use. Click Network Setting > NAT > Sessions to display the following screen. Figure 52 Network Setting > NAT > Sessions LTE6101 User’s Guide...
In the simplest form, NAT changes the source IP address in a packet received from a subscriber (the inside local address) to another (the inside global address) before forwarding the packet to the WAN side. When the response comes back, NAT translates the destination address (the inside LTE6101 User’s Guide...
Figure 53 How NAT Works NAT Table Inside Local Inside Global IP Address IP Address 192.168.1.10 IGA 1 192.168.1.13 192.168.1.11 IGA 2 192.168.1.12 IGA 3 192.168.1.13 IGA 4 192.168.1.12 192.168.1.10 IGA1 Inside Local Inside Global Address (ILA) Address (IGA) 192.168.1.11 192.168.1.10 LTE6101 User’s Guide...
IP address as yourhost.dyndns.org. This feature is useful if you want to be able to use, for example, www.yourhost.dyndns.org and still reach your hostname. If you have a private WAN IP address, then you cannot use Dynamic DNS. LTE6101 User’s Guide...
You can specify up to two host names in the field separated by a comma (","). User Name Type your user name. Password Type the password assigned to you. Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. LTE6101 User’s Guide...
• Use the Access Control screen to view and configure incoming/outgoing filtering rules (Section 11.4 on page 101). • Use the DoS screen to enable or disable Denial of Service (DoS) protection (Section 11.4 on page 101). LTE6101 User’s Guide...
Internet. ICMP uses Internet Protocol (IP) datagrams, but the messages are processed by the TCP/IP software and directly apparent to the application user. Finding Out More Section 11.6 on page 104 for advanced technical information on firewall. LTE6101 User’s Guide...
Select High to have the firewall only allow Telnet, FTP, HTTP, HTTPS, DNS, POP3, and SMTP traffic sent from the LAN to the WAN. Other traffic will be blocked. Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. LTE6101 User’s Guide...
Firewall > Access Control > Add New ACL Rule/Edit screen. To access this screen, click Security > Firewall > Services and then the Add New Service Entry button. Figure 58 Security > Firewall > Services > Add New Service Entry LTE6101 User’s Guide...
This displays the destination IP addresses to which this rule applies. Please note that a blank destination address is equivalent to Any. Services This displays the protocol type and a port range that define the service to which this rule applies. LTE6101 User’s Guide...
Destination Select Single or Range depending on whether you want to enter a single or a range of Address Type destination IP address(es) to which the ACL rule applies. Select Any to indicate any destination IP address. LTE6101 User’s Guide...
Click Back to exit this screen without saving your changes. 11.5 The DoS Screen Click Security > Firewall > DoS to display the following screen. Use this screen to enable or disable Denial of Service (DoS) protection. Figure 61 Security > Firewall > DoS LTE6101 User’s Guide...
Is it possible to modify the rule to be more specific? For example, if IRC is blocked for all users, will a rule that blocks just certain users be more effective? LTE6101 User’s Guide...
Page 105
Internet users may be able to connect to computers with running FTP servers. Does this rule conflict with any existing rules? Once these questions have been answered, adding rules is simply a matter of entering the information into the correct fields in the web configurator screens. LTE6101 User’s Guide...
Use the MAC Filter screen to allow wireless and LAN clients access to the LTE Device. To change your LTE Device’s MAC filter settings, click Security > MAC Filter. The screen appears as shown. Figure 62 Security > MAC Filter LTE6101 User’s Guide...
Page 108
LTE Device in these address fields. Enter the MAC addresses in a valid MAC address format, that is, six hexadecimal character pairs, for example, 12:34:56:78:9a:bc. Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. LTE6101 User’s Guide...
This shows the MAC address of the LAN user’s computer to which this rule applies. User (MAC) Internet Access This shows the day(s) and time on which parental control is enabled. Schedule Network This shows whether the network service is configured. If not, None will be shown. Service LTE6101 User’s Guide...
The following table describes the fields in this screen. Table 47 Add/Edit Parental Control Rule LABEL DESCRIPTION General Active Select the checkbox to activate this parental control rule. Parental Control Enter a descriptive name for the rule. Profile Name LTE6101 User’s Guide...
Page 111
Keyword LTE Device blocks access. Click Delete to remove it. Apply Click this button to save your settings back to the LTE Device. Back Click this button to return to the previous screen without saving any changes. LTE6101 User’s Guide...
Page 112
Chapter 13 Parental Control LTE6101 User’s Guide...
The following figure helps explain the main fields in the web configurator. Figure 65 IPSec Fields Summary Remote Network Local Network Remote IPSec Router VPN Tunnel Remote IP Address Local IP Address Click Security > VPN to open this screen as shown next. Figure 66 IPSec VPN LTE6101 User’s Guide...
Page 114
Enter the name of the VPN connection. Local Address This displays the IP address of the LTE Device. Remote Address This displays the IP address of the remote IPSec router. IPSec Algorithm This displays the encryption algorithm being used for the VPN connection. LTE6101 User’s Guide...
Use these settings. Click Security > VPN > Add New Tunnel to open this screen as shown next. Figure 67 IPSec VPN: Add This screen contains the following fields: Table 49 IPSec VPN: Add LABEL DESCRIPTION IPSEC Setup Active Select Active to activate this VPN policy. LTE6101 User’s Guide...
Page 116
Gateway Address Local ID Select IP to identify the LTE Device by its IP address. Select DNS to identify this LTE Device by a domain name. Select E-mail to identify this LTE Device by an e-mail address. LTE6101 User’s Guide...
Page 117
16 to 62 character range for the key. For example, in "0x0123456789ABCDEF", “0x” denotes that the key is hexadecimal and “0123456789ABCDEF” is the key itself. Advanced Setting - Phase 1 LTE6101 User’s Guide...
Page 118
Longer keys require more processing power, resulting in increased latency and decreased throughput. Authentication Select which hash algorithm to use to authenticate packet data. Choices are Algorithm MD5, SHA1, SHA2-256 and SHA2-512. SHA is generally considered stronger than MD5, but it is also slower. LTE6101 User’s Guide...
This displays if the VPN policy is connected. Tunnel Name Enter the name of the VPN connection. IPSec Algorithm This displays the encryption algorithm being used for the VPN connection. Refresh Click this button to refresh the information on the screen. LTE6101 User’s Guide...
The Authentication Algorithms, HMAC-MD5 (RFC 2403) and HMAC-SHA-1 (RFC 2404, provide an authentication mechanism for the AH and ESP protocols. Key Management Key management allows you to determine whether to use IKE (ISAKMP) or manual key configuration in order to set up a VPN. LTE6101 User’s Guide...
• Outside header: The outside IP header contains the destination IP address of the VPN gateway. • Inside header: The inside IP header contains the destination IP address of the final system behind the VPN gateway. The security protocol appears after the outer IP header and before the inside IP header. LTE6101 User’s Guide...
IPSec SA lifetime period expires. If an IPSec SA times out, then the IPSec router must renegotiate the SA the next time someone attempts to send traffic. 14.3.4 Negotiation Mode The phase 1 Negotiation Mode you select determines how the Security Association (SA) will be established for each connection through IKE negotiations. LTE6101 User’s Guide...
NAT device between the IPSec endpoints rewrites the source or destination address. As a result, the VPN device at the receiving end finds a mismatch between the hash value and the data and assumes that the data has been maliciously altered. LTE6101 User’s Guide...
122), the ID type and content are encrypted to provide identity protection. In this case the LTE Device can distinguish between different incoming SAs that connect from remote IPSec routers that have dynamic WAN IP addresses. The LTE Device LTE6101 User’s Guide...
A pre-shared key identifies a communicating party during a phase 1 IKE negotiation (see Section 14.3.3 on page 122 for more on IKE phases). It is called “pre-shared” because you have to share it with another party before you can communicate with them over a secure connection. LTE6101 User’s Guide...
Diffie-Hellman is used within IKE SA setup to establish session keys. Upon completion of the Diffie-Hellman exchange, the two peers have a shared secret, but the IKE SA is not authenticated. For authentication, use pre-shared keys. LTE6101 User’s Guide...
Critical (CRIT): The system condition is critical. Error (ERROR): There is an error condition on the system. Warning (WARNING): There is a warning condition on the system. Notice (NOTICE): There is a normal but significant condition on the system. LTE6101 User’s Guide...
This field displays the date and time the log was recorded. Level This field displays the severity level of the logs that the device is to send to this syslog server. Message This field states the reason for the log. LTE6101 User’s Guide...
Status This shows the number of bytes received and sent through the WAN interface of the LTE Device. Refresh Interval Select how often you want the LTE Device to update this screen from the drop-down list box. LTE6101 User’s Guide...
Sent (Packet) Data This indicates the number of transmitted packets on this interface. Error This indicates the number of frames with errors transmitted on this interface. Drop This indicates the number of outgoing packets dropped on this interface. LTE6101 User’s Guide...
This shows the name of the client. IP Address This shows the IP address of the client. MAC Address This shows the MAC address of the client. No. of Open This shows the number of NAT sessions used by the client. Session LTE6101 User’s Guide...
Page 132
Chapter 16 Traffic Status LTE6101 User’s Guide...
(*) for each character you type. After you change the password, use the new password to access the LTE Device. Retype to Type the new password again for confirmation. Confirm Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. LTE6101 User’s Guide...
Page 134
Chapter 17 User Account LTE6101 User’s Guide...
Select the Enable check box for the corresponding services that you want to allow access to the LTE Device from the LAN or WLAN. Select the Enable check box for the corresponding services that you want to allow access to the LTE Device from the WAN. LTE6101 User’s Guide...
Page 136
You may change the server port number for a service if needed, however you must use the same port number in order to use that service for remote management. Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. LTE6101 User’s Guide...
In Windows XP, click start, My Computer, View system information and then click the Computer Name tab. Note the entry in the Full computer name field and enter it as the LTE Device System Name. Click Maintenance > System to open the following screen. Figure 79 Maintenance > System LTE6101 User’s Guide...
Page 138
(not recommended). Apply Click this to save your changes back to the LTE Device. Cancel Click this to begin configuring this screen afresh. LTE6101 User’s Guide...
Check with your ISP/network administrator if you are unsure of this information. Time Zone Choose the time zone of your location. This will set the time difference between your time zone and Greenwich Mean Time (GMT). LTE6101 User’s Guide...
Page 140
In Germany for instance, you would type 2 because Germany's time zone is one hour ahead of GMT or UTC (GMT+1). Apply Click Apply to save your changes. Reset Click Reset to begin configuring this screen afresh. LTE6101 User’s Guide...
The LTE Device sends a log to an external syslog server. Select the Enable check box to enable syslog logging. Syslog Server Enter the server name or IP address of the syslog server that will log the selected categories of logs. LTE6101 User’s Guide...
Page 142
Log Level Select the severity level of logs that you want to record. If you want to record all logs, select ALL. Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. LTE6101 User’s Guide...
Click this to find the .bin file you want to upload. Remember that you must decompress compressed (.zip) files before you can upload them. Upload Click this to begin the upload process. This process may take up to three minutes. LTE6101 User’s Guide...
Page 144
After two minutes, log in again and check your new firmware version in the Status screen. If the upload was not successful, an error screen will appear. Click OK to go back to the Firmware Upgrade screen. Figure 85 Error Message LTE6101 User’s Guide...
The backup configuration file will be useful in case you need to return to your previous settings. Click Backup to save the LTE Device’s current configuration to your computer. LTE6101 User’s Guide...
Page 146
IP address (192.168.1.1). See Appendix B on page 167 for details on how to set up your computer’s IP address. If the upload was not successful, an error screen will appear. Click OK to go back to the Configuration screen. LTE6101 User’s Guide...
System restart allows you to reboot the LTE Device remotely without turning the power off. You may need to do this if the LTE Device hangs, for example. Click Maintenance > Reboot. Click the Reboot button to have the LTE Device reboot. This does not affect the LTE Device's configuration. LTE6101 User’s Guide...
Type the IP address of a computer that you want to ping in order to test a connection. Click Ping and the ping statistics will show in the diagnostic . TraceRoute Click this button to perform the traceroute function. This determines the path a packet takes to the specified host. LTE6101 User’s Guide...
Make sure you understand the normal behavior of the LED. See Section 1.6 on page Check the hardware connections. See the Quick Start Guide. Inspect your cables for damage. Contact the vendor to replace any damaged cables. Turn the LTE Device off and on. LTE6101 User’s Guide...
Make sure your Internet browser does not block pop-up windows and has JavaScript and Java enabled. See Appendix C on page 197. Reset the device to its factory defaults, and try to access the LTE Device with the default IP address. See Section 1.7 on page LTE6101 User’s Guide...
I cannot access the Internet anymore. I had access to the Internet (with the LTE Device), but my Internet connection is not available anymore. Check the hardware connections, and make sure the LEDs are behaving as expected. See the Quick Start Guide and Section 1.6 on page LTE6101 User’s Guide...
APs if necessary. • Try closing some programs that use the Internet, especially peer-to-peer applications. If the wireless client is sending or receiving a lot of information, it may have too many programs open that use the Internet. LTE6101 User’s Guide...
The Local Area Connection icon for UPnP disappears in the screen. Restart your computer. I cannot open special applications such as white board, file transfer and video when I use the MSN messenger. Wait more than three minutes. Restart the applications. LTE6101 User’s Guide...
192.168.1.1). Each of these four parts is known as an octet. An octet is an eight-digit binary number (for example 11000000, which is 192 in decimal notation). Therefore, each octet has a possible range of 00000000 to 11111111 in binary, or 0 to 255 in decimal. LTE6101 User’s Guide...
Page 158
Host ID 00000010 By convention, subnet masks always consist of a continuous sequence of ones beginning from the leftmost bit of the mask, followed by a continuous sequence of zeros, for a total number of 32 bits. LTE6101 User’s Guide...
Page 159
This is usually specified by writing a “/” followed by the number of bits in the mask after the address. For example, 192.1.1.0 /25 is equivalent to saying 192.1.1.0 with subnet mask 255.255.255.128. LTE6101 User’s Guide...
Page 160
You can “borrow” one of the host ID bits to divide the network 192.168.1.0 into two separate sub- networks. The subnet mask is now 25 bits (255.255.255.128 or /25). The “borrowed” host ID bit can have a value of either 0 or 1, allowing two subnets; 192.168.1.0 /25 and 192.168.1.128 /25. LTE6101 User’s Guide...
Page 161
Table 73 Subnet 1 LAST OCTET BIT IP/SUBNET MASK NETWORK NUMBER VALUE IP Address (Decimal) 192.168.1. IP Address (Binary) 11000000.10101000.00000001. 00000000 Subnet Mask (Binary) 11111111.11111111.11111111. 11000000 LTE6101 User’s Guide...
Page 164
Regardless of your particular situation, do not create an arbitrary IP address; always follow the guidelines above. For more information on address assignment, please refer to RFC 1597, Address Allocation for Private Internets and RFC 1466, Guidelines for Management of IP Address Space. LTE6101 User’s Guide...
Page 165
WAN addresses must be on different subnets. In the following example, the LAN and WAN are on the same subnet. The LAN computers cannot access the Internet because the router cannot route between networks. Figure 95 Conflicting Computer IP Addresses Example LTE6101 User’s Guide...
Page 166
LAN port both use 192.168.1.1 as the IP address. The computer cannot access the Internet. This problem can be solved by assigning a different IP address to the computer or the router’s LAN port. Figure 96 Conflicting Computer and Router IP Addresses Example LTE6101 User’s Guide...
182 • Linux: Ubuntu 8 (GNOME) page 186 • Linux: openSUSE 10.3 (KDE) page 190 Windows XP/NT/2000 The following example uses the default Windows XP display theme but can also apply to Windows 2000 and Windows NT. LTE6101 User’s Guide...
Page 168
Appendix B Setting Up Your Computer’s IP Address Click Start > Control Panel. Figure 97 Windows XP: Start Menu In the Control Panel, click the Network Connections icon. Figure 98 Windows XP: Control Panel LTE6101 User’s Guide...
Page 169
Right-click Local Area Connection and then select Properties. Figure 99 Windows XP: Control Panel > Network Connections > Properties On the General tab, select Internet Protocol (TCP/IP) and then click Properties. Figure 100 Windows XP: Local Area Connection Properties LTE6101 User’s Guide...
Page 170
In the Command Prompt window, type "ipconfig" and then press [ENTER]. You can also go to Start > Control Panel > Network Connections, right-click a network connection, click Status and then click the Support tab to view your IP address and connection information. LTE6101 User’s Guide...
Page 171
Click Start > Control Panel. Figure 102 Windows Vista: Start Menu In the Control Panel, click the Network and Internet icon. Figure 103 Windows Vista: Control Panel Click the Network and Sharing Center icon. Figure 104 Windows Vista: Network And Internet LTE6101 User’s Guide...
Page 172
Figure 105 Windows Vista: Network and Sharing Center Right-click Local Area Connection and then select Properties. Figure 106 Windows Vista: Network and Sharing Center Note: During this procedure, click Continue whenever Windows displays a screen saying that it needs your permission to continue. LTE6101 User’s Guide...
Page 173
Appendix B Setting Up Your Computer’s IP Address Select Internet Protocol Version 4 (TCP/IPv4) and then select Properties. Figure 107 Windows Vista: Local Area Connection Properties LTE6101 User’s Guide...
Page 174
In the Command Prompt window, type "ipconfig" and then press [ENTER]. You can also go to Start > Control Panel > Network Connections, right-click a network connection, click Status and then click the Support tab to view your IP address and connection information. LTE6101 User’s Guide...
Page 175
Figure 109 Windows 7: Start Menu In the Control Panel, click View network status and tasks under the Network and Internet category. Figure 110 Windows 7: Control Panel Click Change adapter settings. Figure 111 Windows 7: Network And Sharing Center LTE6101 User’s Guide...
Page 176
Appendix B Setting Up Your Computer’s IP Address Double click Local Area Connection and then select Properties. Figure 112 Windows 7: Local Area Connection Status Note: During this procedure, click Continue whenever Windows displays a screen saying that it needs your permission to continue. LTE6101 User’s Guide...
Page 177
Appendix B Setting Up Your Computer’s IP Address Select Internet Protocol Version 4 (TCP/IPv4) and then select Properties. Figure 113 Windows 7: Local Area Connection Properties LTE6101 User’s Guide...
Page 178
Click OK to close the Internet Protocol (TCP/IP) Properties window. Click OK to close the Local Area Connection Properties window. Verifying Settings Click Start > All Programs > Accessories > Command Prompt. In the Command Prompt window, type "ipconfig" and then press [ENTER]. LTE6101 User’s Guide...
Page 179
Figure 115 Windows 7: Internet Protocol Version 4 (TCP/IPv4) Properties Mac OS X: 10.3 and 10.4 The screens in this section are from Mac OS X 10.4 but can also apply to 10.3. Click Apple > System Preferences. Figure 116 Mac OS X 10.4: Apple Menu LTE6101 User’s Guide...
Page 180
In the System Preferences window, click the Network icon. Figure 117 Mac OS X 10.4: System Preferences When the Network preferences pane opens, select Built-in Ethernet from the network connection type list, and then click Configure. Figure 118 Mac OS X 10.4: Network Preferences LTE6101 User’s Guide...
Page 181
Figure 119 Mac OS X 10.4: Network Preferences > TCP/IP Tab. For statically assigned settings, do the following: • From the Configure IPv4 list, select Manually. • In the IP Address field, type your IP address. • In the Subnet Mask field, type your subnet mask. LTE6101 User’s Guide...
Page 182
Check your TCP/IP properties by clicking Applications > Utilities > Network Utilities, and then selecting the appropriate Network Interface from the Info tab. Figure 121 Mac OS X 10.4: Network Utility Mac OS X: 10.5 The screens in this section are from Mac OS X 10.5. LTE6101 User’s Guide...
Page 183
Appendix B Setting Up Your Computer’s IP Address Click Apple > System Preferences. Figure 122 Mac OS X 10.5: Apple Menu In System Preferences, click the Network icon. Figure 123 Mac OS X 10.5: Systems Preferences LTE6101 User’s Guide...
Page 184
From the Configure list, select Using DHCP for dynamically assigned settings. For statically assigned settings, do the following: • From the Configure list, select Manually. • In the IP Address field, enter your IP address. • In the Subnet Mask field, enter your subnet mask. LTE6101 User’s Guide...
Page 185
Appendix B Setting Up Your Computer’s IP Address • In the Router field, enter the IP address of your LTE Device. Figure 125 Mac OS X 10.5: Network Preferences > Ethernet Click Apply and close the window. LTE6101 User’s Guide...
Page 186
Note: Make sure you are logged in as the root administrator. Follow the steps below to configure your computer IP address in GNOME: Click System > Administration > Network. Figure 127 Ubuntu 8: System > Administration Menu LTE6101 User’s Guide...
Page 187
Figure 128 Ubuntu 8: Network Settings > Connections In the Authenticate window, enter your admin account name and password then click the Authenticate button. Figure 129 Ubuntu 8: Administrator Account Authentication LTE6101 User’s Guide...
Page 188
• In the Configuration list, select Static IP address if you have a static IP address. Fill in the IP address, Subnet mask, and Gateway address fields. Click OK to save the changes and close the Properties dialog box and return to the Network Settings screen. LTE6101 User’s Guide...
Page 189
If you know your DNS server IP address(es), click the DNS tab in the Network Settings window and then enter the DNS server information in the fields provided. Figure 132 Ubuntu 8: Network Settings > DNS Click the Close button to apply the changes. LTE6101 User’s Guide...
Page 190
The following screens use the default openSUSE 10.3 installation. Note: Make sure you are logged in as the root administrator. Follow the steps below to configure your computer IP address in the KDE: LTE6101 User’s Guide...
Page 191
Click K Menu > Computer > Administrator Settings (YaST). Figure 134 openSUSE 10.3: K Menu > Computer Menu When the Run as Root - KDE su dialog opens, enter the admin password and click OK. Figure 135 openSUSE 10.3: K Menu > Computer Menu LTE6101 User’s Guide...
Page 192
Figure 136 openSUSE 10.3: YaST Control Center When the Network Settings window opens, click the Overview tab, select the appropriate connection Name from the list, and then click the Configure button. Figure 137 openSUSE 10.3: Network Settings LTE6101 User’s Guide...
Page 193
Select Dynamic Address (DHCP) if you have a dynamic IP address. Select Statically assigned IP Address if you have a static IP address. Fill in the IP address, Subnet mask, and Hostname fields. Click Next to save the changes and close the Network Card Setup window. LTE6101 User’s Guide...
Page 194
Click Finish to save your settings and close the window. Verifying Settings Click the KNetwork Manager icon on the Task bar to check your TCP/IP properties. From the Options sub-menu, select Show Connection Information. Figure 140 openSUSE 10.3: KNetwork Manager LTE6101 User’s Guide...
Page 195
Appendix B Setting Up Your Computer’s IP Address When the Connection Status - KNetwork Manager window opens, click the Statistics tab to see if your connection is working properly. Figure 141 openSUSE: Connection Status - KNetwork Manager LTE6101 User’s Guide...
Page 196
Appendix B Setting Up Your Computer’s IP Address LTE6101 User’s Guide...
In Internet Explorer, select Tools, Pop-up Blocker and then select Turn Off Pop-up Blocker. Figure 142 Pop-up Blocker You can also check if pop-up blocking is disabled in the Pop-up Blocker section in the Privacy tab. In Internet Explorer, select Tools, Internet Options, Privacy. LTE6101 User’s Guide...
Page 198
Click Apply to save this setting. Enable Pop-up Blockers with Exceptions Alternatively, if you only want to allow pop-up windows from your device, see the following steps. In Internet Explorer, select Tools, Internet Options and then the Privacy tab. LTE6101 User’s Guide...
Page 199
Select Settings…to open the Pop-up Blocker Settings screen. Figure 144 Internet Options: Privacy Type the IP address of your device (the web page that you do not want to have blocked) with the prefix “http://”. For example, http://192.168.167.1. LTE6101 User’s Guide...
Page 200
Figure 145 Pop-up Blocker Settings Click Close to return to the Privacy screen. Click Apply to save this setting. JavaScript If pages of the web configurator do not display properly in Internet Explorer, check that JavaScript are allowed. LTE6101 User’s Guide...
Page 201
Figure 146 Internet Options: Security Click the Custom Level... button. Scroll down to Scripting. Under Active scripting make sure that Enable is selected (the default). Under Scripting of Java applets make sure that Enable is selected (the default). LTE6101 User’s Guide...
Page 202
Figure 147 Security Settings - Java Scripting Java Permissions From Internet Explorer, click Tools, Internet Options and then the Security tab. Click the Custom Level... button. Scroll down to Microsoft VM. Under Java permissions make sure that a safety level is selected. LTE6101 User’s Guide...
Page 203
Click OK to close the window. Figure 148 Security Settings - Java JAVA (Sun) From Internet Explorer, click Tools, Internet Options and then the Advanced tab. Make sure that Use Java 2 for <applet> under Java (Sun) is selected. LTE6101 User’s Guide...
Page 204
Mozilla Firefox 2.0 screens are used here. Screens for other versions may vary. You can enable Java, JavaScript and pop-ups in one screen. Click Tools, then click Options in the screen that appears. Figure 150 Mozilla Firefox: Tools > Options LTE6101 User’s Guide...
Page 205
Appendix C Pop-up Windows, JavaScript and Java Permissions Click Content.to show the screen below. Select the check boxes as shown in the following screen. Figure 151 Mozilla Firefox Content Security LTE6101 User’s Guide...
Page 206
Appendix C Pop-up Windows, JavaScript and Java Permissions LTE6101 User’s Guide...
H.323 1720 NetMeeting uses this protocol. HTTP Hyper Text Transfer Protocol - a client/server protocol for the world wide web. HTTPS HTTPS is a secured http session often used in e- commerce. LTE6101 User’s Guide...
Page 208
UNIX systems and network servers. TCP/UDP Secure Shell Remote Login Program. STRM WORKS 1558 Stream Works Protocol. SYSLOG Syslog allows you to send system logs to a UNIX server. LTE6101 User’s Guide...
Page 209
TFTP Trivial File Transfer Protocol is an Internet file transfer protocol similar to FTP, but uses the UDP (User Datagram Protocol) rather than TCP (Transmission Control Protocol). VDOLIVE 7000 Another videoconferencing solution. LTE6101 User’s Guide...
Page 210
Appendix D Common Services LTE6101 User’s Guide...
ZyXEL Communications Corporation. Published by ZyXEL Communications Corporation. All rights reserved.
Page 212
This Class B digital apparatus complies with Canadian ICES-003. Cet appareil numérique de la classe B est conforme à la norme NMB-003 du Canada. Viewing Certifications Go to http://www.zyxel.com. LTE6101 User’s Guide...
If you wall mount your device, make sure that no electrical lines, gas or water pipes will be damaged. • Make sure that the cable system is grounded so as to provide some protection against voltage surges. LTE6101 User’s Guide...
Page 214
Your product is marked with this symbol, which is known as the WEEE mark. WEEE stands for Waste Electronics and Electrical Equipment. It means that used electrical and electronic products should not be mixed with general waste. Used electrical and electronic equipment should be treated separately. LTE6101 User’s Guide...
Domain Name System. See DNS. Broadband DS (Differentiated Services) example DS field DSCP dynamic DNS Dynamic Host Configuration Protocol, see DHCP DYNDNS wildcard certification notices viewing channel scan channel, wireless LAN Encapsulation client list encapsulation configuration backup encryption reset LTE6101 User’s Guide...
Page 216
Media Access Control, see MAC Address IKE phases model name inside header Multiple BSS, see MBSSID Internet access Internet Assigned Numbers Authority, see IANA Internet Key Exchange IP address default 88, 164 IP Address Assignment definitions IP pool how it works LTE6101 User’s Guide...
Page 217
WPS subnet mask subnetting syslog protocol severity levels 77, 85 system Quality of Service, see QoS firmware Quick Start Guide 2, 19 passwords status System Info system name 30, 138 RADIUS server registration product related documentation LTE6101 User’s Guide...
Page 218
Wide Area Network, see WAN warnings Web Configurator web configurator passwords 46, 57 WEP Encryption wireless LAN authentication 55, 56 example channel encryption example fragmentation threshold limitations MAC address filter MBSSID preamble RADIUS server RTS/CTS threshold LTE6101 User’s Guide...
Need help?
Do you have a question about the LTE6101 and is the answer not in the manual?
Questions and answers