background image

Online Help 

6  Security 

 

 

Huawei Proprietary and Confidential      

Copyright © Huawei Technologies Co., Ltd 

22 

 

Security 

6.1 Setting Firewall Level 

This page describes how to set the firewall level. If 

Firewall level

 is set to 

Custom

, you can 

modify the configuration. 

To set the firewall level, perform the following steps: 

1.

 

Choose 

Security 

Firewall Level

.   

2.

 

Set 

Firewall level 

from the drop-down list. 

3.

 

Set 

DoS attack

 to 

Enable

To block Denial of Service (DoS) attacks from the LAN and Internet. 

4.

 

Click 

Submit

.   

----End 

To set filtering functions of the firewall, perform the following steps: 

1.

 

Choose 

Security 

Firewall Level

.   

2.

 

Set 

Firewall level

 to 

Custom

3.

 

Set 

MAC filtering

.   

4.

 

Set 

IP filtering

5.

 

Set 

URL filtering

6.

 

Click 

Submit

.   

----End 

6.2 MAC Filtering 

This page enables you to configure the MAC address filtering rules. 

6.2.1 Managing MAC Address Whitelist 

To add a MAC address whitelist rule, perform the following steps: 

1.

 

Choose 

Security 

MAC Filtering

.   

2.

 

Set 

MAC filtering mode

 to 

Whitelist

3.

 

Click 

Add Item

.   

Summary of Contents for B593

Page 1: ...Online Help Huawei Proprietary and Confidential Copyright Huawei Technologies Co Ltd Welcome to the LTE CPE Online Help ...

Page 2: ...rs or network service providers thus the descriptions herein may not exactly match the product or its accessories you purchase Huawei Technologies Co Ltd reserves the right to change or modify any information or specifications contained in this manual without prior notice or obligation NO WARRANTY THE CONTENTS OF THIS MANUALARE PROVIDED AS IS EXCEPT AS REQUIRED BY APPLICABLE LAWS NO WARRANTIES OF ...

Page 3: ...oduct Information 4 2 2 2 Viewing the Device List 4 2 3 Quick Setup 4 2 4 Update 5 2 4 1 Updating on Local 5 2 4 2 Updating Online 5 2 4 3 Updating Using CWMP 6 3 Internet 7 3 1 Network Connection 7 3 1 1 Selecting a Network Mode 7 3 1 2 Selecting a Connection Mode 7 3 1 3 Selecting an APN Profile 8 3 1 4 Selecting PDP Type 8 3 1 5 Setting Data Roaming 8 3 2 APN Management 8 3 3 PIN Management 9 3...

Page 4: ...0 6 Security 22 6 1 Setting Firewall Level 22 6 2 MAC Filtering 22 6 2 1 Managing MAC Address Whitelist 22 6 2 2 Managing MAC Address Blacklist 23 6 3 URL Filtering 23 6 3 1 Managing URL Whitelist 24 6 3 2 Managing URL Blacklist 24 6 4 IP Filtering 25 6 4 1 Managing IP Address Whitelist 25 6 4 2 Managing IP Blacklist 26 6 5 Setting Service Access Control 26 6 6 Setting ALG 26 6 7 Setting Port Forw...

Page 5: ...Speed Dial 35 8 5 Setting Advanced SIP Parameters 36 8 6 Setting Advanced Voice Parameters 37 8 7 Setting Advanced Codec Parameters 37 9 System 39 9 1 Maintenance 39 9 1 1 Restart 39 9 1 2 Reset 39 9 1 3 Downloading a Configuration File 39 9 1 4 Uploading a Configuration File 40 9 2 Changing the Password 40 9 3 Setting the Date and Time 40 9 4 Diagnosis 41 9 4 1 Ping 41 9 4 2 Traceroute 41 9 4 3 S...

Page 6: ... optimum performance make sure your computer meets the following requirements Item Requirement CPU Pentium 500 MHz or higher Memory 128 MB RAM or higher Hard disk 50 MB available space Operating system Microsoft Windows XP Windows Vista or Windows 7 Mac Mac OS X 10 5 or higher Display resolution 1024 x 768 pixels or higher Browser Internet Explorer 7 0 or later Firefox 3 6 or later Opera 10 or lat...

Page 7: ...an log in to the web management page after the password is verified To protect your CPE from unauthorized access change the password after your first login The CPE supports diagnostic function If you encounter problems please contact customer service for the specific using method Please change the default WiFi password as soon as possible To ensure your data safety it is recommended that you turn ...

Page 8: ...ink and downlink traffic volumes uplink and downlink rates and time spent online End 2 1 3 Viewing the Wi Fi Status To view the Wi Fi network connection status perform the following steps 1 Choose Home Overview 2 In the Wi Fi Status area view the following information View the Wi Fi network connection status including the SSID IP Address MAC Address Broadcast mode and Wireless Encryption mode View...

Page 9: ...n the Product Information area view the basic information about the CPE For example the name serial number SN international mobile equipment identity IMEI End 2 2 2 Viewing the Device List To view the device list perform the following steps 1 Choose Home Product Information 2 In the Device List area view the information about the devices such as Computer Name MAC Address IP Address and Lease Time ...

Page 10: ...gs have been fixed and the system stability is usually improved 2 4 1 Updating on Local To perform a local upgrade successfully connect the CPE to your computer through Wi Fi or a network cable save the upgrade file on the computer and make sure the CPE is not connected to anything other than a power adapter and the computer To perform a local upgrade perform the following steps 1 Choose Home Upda...

Page 11: ...Go to step 3 Updates are not found The upgrade ends 3 Click Update to download the updates After downloading the updates the CPE automatically upgrades and restarts A message is displayed indicating that the upgrade is complete Then the login dialog box is displayed During an upgrade do not disconnect the power supply or operate the CPE End 2 4 3 Updating Using CWMP To update the CPE software usin...

Page 12: ...lects its working mode with an order of preference of 4G 3G and 2G 4G The CPE accesses 4G networks only 3G The CPE accesses 3G networks only 2G The CPE accesses 2G networks only 3 Click Submit End 3 1 2 Selecting a Connection Mode To select a network connection mode perform the following steps 1 Choose Internet Network Connection 2 Set Connection mode Value Description Always on If the conditions ...

Page 13: ...n IPv4 Internet Protocol version 4 IPv4 that is the foundation for current Internet technologies Because IP resources are limited an IP address is shared by different persons in different time periods that is an IP address is not allocated to only one network subscriber Thus the real name system cannot be implemented over the IPv4 based networks IPv4v6 IPv4 to IPv6 transition technology that is us...

Page 14: ...d 4 Set Authentication to None PAP CHAP or Auto 5 Click Submit End To delete an APN profile perform the following steps 1 Choose Internet APN Management 2 Choose the APN profile item to be deleted and click Delete 3 Click OK End 3 3 PIN Management To manage the PIN You can perform the following operations on the PIN Management page Enable or disable the PIN verification Verify the PIN Chang the PI...

Page 15: ... 8 digits in the Enter PIN box 4 Click Submit End 3 3 4 Verifying the PIN If PIN verification is enabled but the PIN is not verified the verification is required To verify the PIN perform the following steps 1 Choose Internet PIN Management 2 Enter the PIN 4 to 8 digits in the PIN box 3 Click Submit End 3 3 5 Changing the PIN The PIN can be changed only when PIN verification is enabled and the PIN...

Page 16: ...3 3 7 Verifying the PUK If PIN verification is enabled and the PIN fails to be verified for three consecutive times the PIN will be locked In this case you need to verify the PUK and change the PIN to unlock it To verify the PUK perform the following steps 1 Choose Internet PIN Management 2 Enter the PUK in the PUK box 3 Enter a new PIN in the New PIN box 4 Repeat the new PIN in the Confirm PIN bo...

Page 17: ...rm the following steps 1 Choose LAN DHCP Settings 2 In the LAN Host Settings area set IP address 3 Set the DHCP server to Enable 4 Click Submit End 4 2 Configuring the DHCP Server DHCP enables individual clients to automatically obtain TCP IP configuration when the server powers on You can configure the CPE as a DHCP server or disable it when the CPE is working in the routing mode When configured ...

Page 18: ... will receive the same IP address each time it accesses the DHCP server For example you can bind an IP address to an FTP server on the LAN After you change the settings click Submit for the changes to take effect The DHCP server may need to restart To add an item to the setup list perform the following steps 1 Choose LAN DHCP Settings 2 Click Edit List 3 Click Add 4 Set the MAC address and IP Addr...

Page 19: ...ght Huawei Technologies Co Ltd 14 2 Click Edit List 3 Choose the item to be deleted and click Delete 4 Click OK End To delete all items from the setup list perform the following steps 1 Choose LAN DHCP Settings 2 Click Edit List 3 Click Delete All 4 Click OK End ...

Page 20: ... 11b The Wi Fi client can connect to the CPE in 802 11b mode 802 11b g n The Wi Fi client can connect to the CPE in 802 11b 802 11g or 802 11n mode If the client connects to the CPE in 802 11n mode the Advanced Encryption Standard AES encryption mode is required 4 Click Submit End 5 1 2 Setting SSID Profile After you configure the CPE on the SSID Profile page the Wi Fi client connects to the CPE b...

Page 21: ...ients connect to the CPE in WPA2 PSK encryption mode This mode is recommended because it has a high security level If Security is set to WPA PSK WPA2 PSK Wi Fi clients connect to the CPE in WPA PSK WPA2 PSK encryption mode 7 Set the encryption mode If Sets to Description WEP Authentication mode Shared authentication The client connects to the CPE in shared authentication mode Open authentication T...

Page 22: ...o the CPE To configure Wi Fi MAC control settings perform the following steps 1 Choose Wi Fi Access Management 2 In the Settings area set SSID s MAC Access The MAC access of each SSID can be set to Disable Blacklist or Whitelist If SSID s MAC Access is set to Disable access restrictions do not take effect If SSID s MAC Access is set to Blacklist only the devices that are not in the blacklist can c...

Page 23: ...ccess list perform the following steps 1 Choose Wi Fi Access Management 2 Click Edit MAC List 3 Choose the item to be deleted and click Delete 4 Click OK End To delete all items from the Wi Fi access list perform the following steps 1 Choose Wi Fi Access Management 2 Click Edit MAC List 3 Click Delete All 4 Click OK End 5 3 WPS Settings Wi Fi Protected Setup WPS enables you to simply add a wireles...

Page 24: ...2 ASCII characters It cannot be empty and the last character cannot be a blank character In addition the SSID cannot contain the following special characters 5 Set Maximum number of devices This parameter indicates the maximum number of Wi Fi clients that connect to the CPE A maximum of 32 clients can connect to the CPE 6 Set Hide SSID broadcast to Enable If the SSID is hidden the client cannot de...

Page 25: ...20 40MHz 802 11n supports 20 MHz or 40 MHz bandwidth 5 Set Transmit power If this parameter is set to 100 the Wi Fi client transmits at full power If this parameter is set to 80 60 or 40 the Wi Fi client transmits signals at low power The Wi Fi client located far away from the CPE may fail to access the CPE 6 Set WMM to Enable Wi Fi Multimedia WMM is a Wi Fi Alliance interoperability certification...

Page 26: ...WPA WPA2 PSK encryption mode After WDS is enabled disable DHCP on CPEs that are not directly connected to the WAN port If WDS is enabled the WPS function will not take effect If the channel is set to Auto go to the Advanced Settings page to set the channel To configure the WDS perform the following steps 1 Choose Wi Fi WDS 2 Set WDS to Enable 3 Click Scan 4 From the search results choose the SSID ...

Page 27: ...t DoS attack to Enable To block Denial of Service DoS attacks from the LAN and Internet 4 Click Submit End To set filtering functions of the firewall perform the following steps 1 Choose Security Firewall Level 2 Set Firewall level to Custom 3 Set MAC filtering 4 Set IP filtering 5 Set URL filtering 6 Click Submit End 6 2 MAC Filtering This page enables you to configure the MAC address filtering r...

Page 28: ...ering 2 Set MAC filtering mode to Whitelist 3 Choose the rule to be deleted and click Delete 4 Click OK End To delete all MAC address whitelist rules perform the following steps 1 Choose Security MAC Filtering 2 Set MAC filtering mode to Whitelist 3 Click Delete All 4 Click OK End 6 2 2 Managing MAC Address Blacklist Choose Security MAC Filtering and then set MAC filtering mode to Blacklist The ot...

Page 29: ...ified and click Edit 4 On the displayed page set URL 5 Click Submit End To delete a URL whitelist rule perform the following steps 1 Choose Security URL Filtering 2 Set URL filtering mode to Whitelist 3 Choose the rule to be deleted and click Delete 4 Click OK End To delete all URL whitelist rules perform the following steps 1 Choose Security URL Filtering 2 Set URL filtering mode to Whitelist 3 C...

Page 30: ...urce port or port segment to be filtered 8 In the Destination IP Address Range box enter the destination IP address or IP address segment to be filtered 9 In the Destination port Range box enter the destination port or port segment to be filtered 10 Click Submit End To modify an IP whitelist rule perform the following steps 1 Choose Security IP Filtering 2 Set IP filtering mode to Whitelist 3 Choo...

Page 31: ...ntrolled by the CPE By default the access control rules are not in effect To set the access control list perform the following steps 1 Choose Security Service Access Control 2 Choose the item to be configured and click Edit 3 Set IP address range If Access Source is set to LAN the IP address must be on the same network segment as the IP address set on the LAN Host Settings page If Access Source is...

Page 32: ...ing steps 1 Choose Security Port Forwarding 2 Click Add Item 3 Set Type 4 Set Protocol 5 Optional Set Remote host 6 Set Remote port range The port number ranges from 1 to 65535 7 Set Local host This IP address must be different from the IP address that is set on the LAN Host Settings page but they must be on the same network segment 8 Set Local port The port number ranges from 1 to 65535 9 Set Sta...

Page 33: ...Plug and Play UPnP function To enable UPnP perform the following steps 1 Choose Security UPnP 2 Set UPnP to Enable 3 Click Submit End 6 9 Setting DMZ If the demilitarized zone DMZ is enabled the packets sent from the WAN are directly sent to a specified IP address on the LAN before being discarded by the firewall To set DMZ perform the following steps 1 Choose Security DMZ 2 Set DMZ to Enable 3 Se...

Page 34: ...ame For example if the domain name provided by your service provider is test customtest dyndns org enter customtest dyndns org as Domain name and test as Host name 5 Enter User name and Password 6 Click Submit End 7 2 SMS Management 7 2 1 Viewing SMS Messages You can check the messages in your inbox drafts and outbox folders To view a message perform the following steps 1 Choose Services SMS Messa...

Page 35: ...2 In Phone number enter the recipients phone numbers 3 In Content edit a message 4 Click Save End 7 2 4 Forwarding SMS Messages To forward a message perform the following steps 1 Choose Services SMS Messages 2 Choose the message to be forwarded and click Forward 3 In Phone number enter the recipients phone numbers 4 Click Send End 7 2 5 Replying to SMS Messages To reply to a message perform the fo...

Page 36: ... center number 3 Set whether to enable SMS report 4 Set whether to enable Save sent messages A message sent to multiple recipients cannot be saved 5 Select the save time from the drop down list 6 Click Submit End 7 4 Setting FTP Server The FTP server enables you to share data on your USB storage device To enable the FTP server perform the following steps 1 Choose Services FTP server 2 Set FTP to E...

Page 37: ...ount users can access the FTP server through the FTP client The user list shows the added users and related information for example user names shared directories and permissions In addition you can add edit or delete the users To add a user to the user list perform the following steps 1 Choose Services User Settings 2 Click Add 3 Set the parameters related to the user 4 Click Submit End To modify ...

Page 38: ...the following steps 1 Choose Services User Settings 2 Click Delete All 3 Click OK End 7 8 Viewing USB Storage The USB Storage page displays the USB storage space for example total storage space used space and free space To view the USB storage space perform the following steps 1 Choose Services USB Storage 2 View the information about the USB storage space End ...

Page 39: ... box enter the port of the SIP account provided by your service provider 3 In the Proxy server address box enter the address of the proxy server provided by your service provider for example 192 168 1 10 4 In the Proxy server port box enter the port of the proxy server provided by your service provider for example 5060 The value ranges from 1 to 65535 5 In the Registration server address box enter...

Page 40: ...vice provider 5 Click Submit End To modify a SIP account perform the following steps 1 Choose VoIP SIP Account 2 Choose the item to be modified and click Edit 3 Repeat steps 3 and 4 in the previous procedure 4 Click Submit End To delete a SIP account perform the following steps 1 Choose VoIP SIP Account 2 Choose the item to be deleted and click Delete 3 Click OK End To delete all SIP accounts perf...

Page 41: ...P Speed Dial 2 Choose the item to be modified and click Edit 3 Repeat steps 3 through 5 in the previous procedure 4 Click Submit End To delete a speed dial number perform the following steps 1 Choose VoIP Speed Dial 2 Choose the number to be deleted and click Delete 3 Click OK End To delete all speed dial numbers perform the following steps 1 Choose VoIP Speed Dial 2 Click Delete All 3 Click OK En...

Page 42: ...efault settings To set the advanced voice parameters perform the following steps 1 Choose VoIP Advanced Voice 2 Set the following parameters DTMF Method specifies the Dual Tone Multi Frequency DTMF transmission mode Fax Option specifies the Fax over IP mode Country Region specifies the country or region where the CPE is located If you change the Country Region settings you must restart the CPE for...

Page 43: ...lt value Primary codec type specifies the primary voice codec type Secondary codec type specifies the secondary voice codec type Third codec type specifies the third voice codec type Fourth codec type specifies the fourth voice codec type Fifth codec type specifies the fifth voice codec type Sixth codec type specifies the sixth voice codec type 3 Click Submit End ...

Page 44: ...on enables you to restore the CPE to its default settings To restore the CPE perform the following steps 1 Choose System Maintenance 2 Click Reset 3 Click OK The CPE is then restored to its default settings End 9 1 3 Downloading a Configuration File You can download the existing configuration file to back it up To do so 1 Choose System Maintenance 2 Click Download on the Maintenance page In the di...

Page 45: ...change the login password of the admin user After the password changes enter the new password the next time you log in To change the password perform the following steps 1 Choose System Change Password 2 Enter the current password set a new password and confirm the new password New password and Confirm password must contain 8 to 15 ASCII characters 3 Click Submit End 9 3 Setting the Date and Time ...

Page 46: ...et Packet size and Timeout 5 Set Do not fragment to Enable 6 Click Ping Wait until the ping command is executed The execution results are displayed in the Results box End 9 4 2 Traceroute If the CPE fails to access the Internet run the Traceroute command to preliminarily identify the problem To do so 1 Choose System Diagnosis 2 In the Method area select Traceroute 3 Enter the domain name in the Ta...

Page 47: ...In the Method area select Wireless status check The Wireless Status page is displayed End 9 5 Logs Logs record user operations and key running events To view logs 1 Choose System Logs 2 Select the corresponding log level from the Log level drop down list The number of logs in this level is displayed to the right of the drop down list and all logs are displayed in the output box 3 Select the operat...

Page 48: ...E are automatically set using the TR 069 function and you do not need to set other parameters on the CPE To configure the CPE to implement the TR 069 function perform the following steps 1 Choose System TR 069 Settings 2 To enable the CPE to send inform packets to the ACS at predefined intervals set Periodic inform to Enable 3 If you set Periodic inform to Enable set Periodic inform interval 4 In ...

Page 49: ...laced in an open area that is far away from obstructions such as concrete or wooden walls Check that the CPE is placed far away from household electrical appliances that generate strong electromagnetic field such as microwave ovens refrigerators and satellite dishes If the problem persists contact authorized local service suppliers The power adapter of the CPE is overheated The CPE will be overhea...

Page 50: ...Configuration Protocol DMZ Demilitarized Zone DNS Domain Name Server Domain Name System DoS Denial of Service DST Daylight Saving Time FTP File Transfer Protocol GSM Global System for Mobile Communications GUI Graphical User Interface HTTP Hypertext Transfer Protocol ICMP Internet Control Message Protocol IMEI International Mobile Station Equipment Identity IP Internet Protocol IPSec Internet Prot...

Page 51: ...ssion Initiation Protocol SN Serial Number SNTP Simple Network Time Protocol SSID Service Set Identifier SSH Secure Shell SYN Synchronous Idle TKIP Temporal Integrity Protocol TLS Transport Layer Security TTLS Tunneled Transport Layer Security UDP User Datagram Protocol UPnP Universal Plug and Play URL Uniform Resource Locator VLAN Virtual Local Area Network VoIP Voice over Internet Protocol WAN W...

Reviews: