manualshive.com logo in svg

ZyXEL Communications HES-309M, User Manual, Page: 212 / 246

Share
Download
ZyXEL Communications HES-309M User Manual Download Page 212

Appendix E Importing Certificates

HES-309M Series User’s Guide

212

Firefox

The following example uses Mozilla Firefox 2 on Windows XP Professional; 
however, the screens can also apply to Firefox 2 on all platforms.

1

If your device’s web configurator is set to use SSL certification, then the first time 
you browse to it you are presented with a certification error.

2

Select 

Accept this certificate permanently

 and click 

OK.

Figure 143   

Firefox 2: Website Certified by an Unknown Authority

Summary of Contents for HES-309M

Page 1: ...om www zyxel com HES 309M WiMAX Outdoor CPE Copyright 2010 ZyXEL Communications Corporation Firmware Version 2 00 Edition 1 10 2010 Default Login Details IP Address http 192 168 1 1 User Name admin Pa...

Page 2: ......

Page 3: ...p you get up and running right away It contains information on setting up your network and configuring for Internet access Support Disc Refer to the included CD for support documents ZyXEL Web Site Pl...

Page 4: ...Forum This contains discussions on ZyXEL products Learn from others who use ZyXEL products and share your experiences as well Customer Support Should problems arise that cannot be solved by the metho...

Page 5: ...are all in bold font A key stroke is denoted by square brackets and uppercase text for example ENTER means the enter or return key on your keyboard Enter means for you to type one or more characters a...

Page 6: ...Figures in this User s Guide may use the following generic icons The WiMAX Device icon is not an exact representation of your product Table 1 Common Icons WiMAX Device Computer Wireless Signal Noteboo...

Page 7: ...our device Connect it to the right supply voltage for example 110V AC in North America or 230V AC in Europe Do NOT remove the plug and connect it to a power outlet by itself always attach the plug to...

Page 8: ...ion against voltage surges Your product is marked with this symbol which is known as the WEEE mark WEEE stands for Waste Electronics and Electrical Equipment It means that used electrical and electron...

Page 9: ...ontents Overview User s Guide 15 Getting Started 17 The Web Configurator 19 Setup Wizard 23 Tutorials 29 Technical Reference 45 System Status 47 WiMAX 51 Network Settings 73 Security 105 Maintenance 1...

Page 10: ...Contents Overview HES 309M Series User s Guide 10...

Page 11: ...1 2 WiMAX Device Hardware 18 1 2 1 LEDs 18 1 3 Good Habits for Device Management 18 Chapter 2 The Web Configurator 19 2 1 Overview 19 2 1 1 Accessing the Web Configurator 19 2 1 2 The Reset Button 20...

Page 12: ...ng DDNS on Your WiMAX Device 40 4 8 3 Testing the DDNS Setting 40 4 9 Configuring Static Route for Routing to Another Network 40 4 10 Remotely Managing Your WiMAX Device 43 Part II Technical Reference...

Page 13: ...Port Forwarding Example 92 7 12 DMZ 93 7 13 ALG 94 7 14 UPnP 95 7 14 1 Installing UPnP in Windows XP 95 7 14 2 Web Configurator Easy Access 99 7 15 DDNS 101 7 16 Content Filter 102 Chapter 8 Security...

Page 14: ...10 1 Power Hardware Connections and LEDs 137 10 2 WiMAX Device Access and Login 138 10 3 Internet Access 140 10 4 Reset the WiMAX Device to Its Factory Defaults 141 10 4 1 Pop up Windows JavaScript a...

Page 15: ...15 PART I User s Guide...

Page 16: ...16...

Page 17: ...ns on hardware connections In a wireless metropolitan area network MAN the WiMAX Device connects to a WiMAX base station BS for Internet access The following diagram shows a notebook computer equipped...

Page 18: ...word Use a password that s not easy to guess and that consists of different types of characters such as numbers and letters Write down the password and put it in a safe place Back up the configuration...

Page 19: ...enabled by default in many operating systems and web browsers JavaScript enabled by default in most web browsers Java permissions enabled by default in most web browsers See the Appendix C on page 179...

Page 20: ...t The device restarts when the defaults have been restored 3 Reconfigure the WiMAX Device following the steps in your Quick Start Guide 2 1 3 Saving and Canceling Changes All screens to which you can...

Page 21: ...ge Click this to go to the first page in the table Previous Page Click this to go to the previous page in the table Page Indicator Jump to Page This indicates which page is currently displayed in the...

Page 22: ...k this to open the Main screen which shows your WiMAX Device status and other information WiMAX Click this to open the WiMAX menu which gives you options for configuring your WiMAX settings Network Se...

Page 23: ...y of the configuration tasks the wizard helps you to perform They are 1 Set up your Local Area Network LAN options which determine how the devices in your home or office connect to the WiMAX Device 2...

Page 24: ...the web configurator is running on a computer on the LAN you lose access to it as soon as you change this field You can access the web configurator again by typing the new IP address in the browser IP...

Page 25: ...d by DHCP Server First DNS Server Specify the first IP address of three DNS servers that the network can use The WiMAX Device provides these IP addresses to DHCP clients Second DNS Server Specify the...

Page 26: ...e starts over with the Start Frequency Note This field only appears when you select By Range under Setting Type End Frequency Enter the frequency value at the end of the frequency range to use Note Th...

Page 27: ...scribes the labels in this screen Table 7 Setup Wizard WiMAX Authentication Settings LABEL DESCRIPTION Authentication Authenticati on Mode Select a WiMAX authentication mode for authentication network...

Page 28: ...ion on the complete range of WiMAX Device features available in the more advanced web configurator Note If you cannot access the Internet open the web configurator again to confirm that the Internet s...

Page 29: ...te on page 32 Blocking Web Access on page 33 Configuring the MAC Address Filter see page 34 Setting Up NAT Port Forwarding see page 36 Access the WiMAX Device Using DDNS see page 39 Configuring Static...

Page 30: ...mmary of the information you will need to complete the tasks in this tutorial 1 In the Web Configurator open the Networking Setting LAN screen and set the IP Address to 192 168 100 1 Use the default I...

Page 31: ...orking Setting LAN DHCP screen 5 Select Server for the DHCP mode then enter 192 168 100 10 and 192 168 100 30 as your DHCP starting and ending IP addresses 6 Leave the other settings as their defaults...

Page 32: ...nging Certificate This tutorial shows you how to import a new security certificate which allows your device to communicate with another network servers Goal Import a new security certificate into the...

Page 33: ...me or office environment you may decide that you want to block an Internet website access You may need to block both the website s IP address and domain name Goal Configure the WiMAX Device s content...

Page 34: ...ess Violation message when you try to access to http www example com You may also need to block the IP address of the website if you do not want users to access to the website through its IP address 4...

Page 35: ...ow the MAC address of the computer If not you can look for the MAC address in the Network Setting LAN DHCP screen 192 168 100 3 mapping to 00 02 E3 53 16 95 in this example 2 Click Security Firewall M...

Page 36: ...online games with them on Xbox LIVE In order to communicate and play with other gamers on Xbox LIVE Thomas needs to configure the port settings on his WiMAX Device Xbox 360 requires the following por...

Page 37: ...rt forwarding Click Network Setting WAN and make sure NAT is selected in the Operation Mode field Click Save 3 Click Network Setting NAT Port Forwarding and then click the first entry to edit the rule...

Page 38: ...connect his Xbox 360 to the Internet and play online games with his friends In this tutorial all port 80 traffic is forwarded to the Xbox 360 but port 80 is also the default listening port for remote...

Page 39: ...Note If you have a private WAN IP address see Private IP Addresses on page 198 then you cannot use DDNS 4 8 1 Registering a DDNS Account on www dyndns org 1 Open a browser and type http www dyndns org...

Page 40: ...ting Now you should be able to access the WiMAX Device from the Internet To test this 1 Open a web browser on the computer using the IP address a b c d that is connected to the Internet 2 Type http my...

Page 41: ...A in N1 network to computer B in N2 network the traffic is sent to the WiMAX Device s WAN default gateway by default In this case computer B will never receive the traffic You need to specify a stati...

Page 42: ...t mask 255 255 255 0 for the destination N2 3b Enter 192 168 1 253 R s IP address on N1 in the IP Address field under Next Hop 3a Click Save Now computer B should be able to receive traffic from compu...

Page 43: ...vice to allow management requests from the WAN Internet See Also Section 9 3 on page 119 1 Open the Maintenance Remote MGMT HTTP screen 2 Select Enable in both HTTP Server and HTTPS Server sections an...

Page 44: ...Chapter 4 Tutorials HES 309M Series User s Guide 44...

Page 45: ...45 PART II Technical Reference...

Page 46: ...46...

Page 47: ...this screen to view a summary of your WiMAX Device connection status 5 2 System Status This screen allows you to view the current status of the device system resources and interfaces LAN and WAN Clic...

Page 48: ...vices by reducing the amount of memory allocated to NAT and firewall rules you may have to reduce the number of NAT rules or firewall rules to do so or by deleting rules in functions such as incoming...

Page 49: ...current IP address of the WiMAX Device in the WAN Subnet Mask This field indicates the current subnet mask on the WAN Gateway This field indicates the IP address of the gateway to which the WiMAX Devi...

Page 50: ...Chapter 5 System Status HES 309M Series User s Guide 50...

Page 51: ...yXEL is a member of the WiMAX Forum the industry group dedicated to promoting and certifying interoperability of wireless broadband products In a wireless MAN a wireless equipped computer is known eit...

Page 52: ...tween the WiMAX Device and the base station are controlled by the base station The WiMAX Device follows the base station s configuration Authentication When authenticating a user the base station uses...

Page 53: ...tion Have the WiMAX Device search only certain frequencies by configuring the downlink frequencies Your operator can give you information on the supported frequencies The downlink frequencies are poin...

Page 54: ...rength and a high interference plus noise ratio it can use Digital Signal Processing DSP to decode it if the signal strength is lower it can switch to an alternate burst profile RSSI Received Signal S...

Page 55: ...ct Mode Select the auto connect mode By channel power Auto connects to the base station if the signal strength of the channel is sufficient for the WiMAX Device By CINR Auto connects to the base stati...

Page 56: ...se station within range of the WiMAX Device Preamble ID The preamble ID is the index identifier in the header of the base station s broadcast messages In the beginning of a mobile stations s network e...

Page 57: ...evice to scan one or more specific radio frequencies given by your WiMAX service provider to find available connections to base stations Click WiMAX Profile Frequency Settings to open this screen as s...

Page 58: ...nter frequency of an frequency band in kilohertz KHz Click the number to modify it Enter the center frequency in this field when you are adding an entry Bandwidth MHz This displays the bandwidth of th...

Page 59: ...e entire frequency band the WiMAX Device supports The frequenc ies to scan that you configured in table A must be within this range Band Start KHz This indicates the beginning of the frequency band in...

Page 60: ...uthentication Settings These settings allow the WiMAX Device to establish a secure authenticated connection with the service provider Click WiMAX Profile Authentication Settings to open this screen as...

Page 61: ...alidating the identity of the server the client sends a different certificate to the server The exchange of certificates is done in the open before a secured tunnel is created This makes user identity...

Page 62: ...of serious security flaws it is generally not recommended that you use it for authentication security PAP Password Authentication Protocol uses unencrypted plaintext to send a passwords for authentica...

Page 63: ...t to open this screen as shown next Figure 18 Connect Screen Delete existed Root Certificate file Select this to delete an existing root certificate file from the WiMAX Device Delete existed Device Ce...

Page 64: ...sconnect from the selected base station BSID This field displays the base station MAC address Preamble ID This field displays the preamble ID The preamble ID is the index identifier in the header of t...

Page 65: ...for any available WiMAX connections Disconnected No WiMAX connection is available Network Entry A WiMAX connection is initializing Normal The WiMAX connection has been successfully established BSID T...

Page 66: ...e Start Frequency KHz Enter the start frequency in kilohertz KHz for a wide scan range End Frequency KHz Enter the end frequency in kilohertz KHz for a wide scan range Step KHz Enter the step incremen...

Page 67: ...DESCRIPTION Profile This field displays the profile name BSID This field displays the MAC address of the base station to which the WiMAX Device is currently connected RSSI This field displays the Rec...

Page 68: ...s a better quality signal Frequency This field displays the frequency in kilohertz KHz TX Power This field displays the transmission power of the WiMAX Device in dBm UL MCS This field displays the Upl...

Page 69: ...s Screen This screen contains the following sections Table 16 Link Statistics LABEL DESCRIPTION Link This section provides a detailed overview of link statistics HARQ This section provides a detailed...

Page 70: ...made through the WiMAX device since its last reboot Click WiMAX Service Flow to open this screen as shown next Figure 23 Service Flow Screen This screen contains the following fields Table 17 Connect...

Page 71: ...ction 1 2 1 on page 18 for a description of buzzer states Click WiMAX Buzzer to open this screen as shown next Figure 24 Buzzer Screen This screen contains the following fields Table 19 Buzzer LABEL D...

Page 72: ...Chapter 6 WiMAX HES 309M Series User s Guide 72...

Page 73: ...twork Every networking device including computers servers routers printers etc needs an IP address to communicate across the network These networking devices are also known as hosts Subnet Masks Subne...

Page 74: ...lds are not specified for instance left as 0 0 0 0 the WiMAX Device tells the DHCP clients that it itself is the DNS server When a computer sends a DNS query to the WiMAX Device the WiMAX Device forwa...

Page 75: ...work You may enter a single port number or a range of port numbers to be forwarded and the local IP address of the desired server The port number identifies a service for example web service is on por...

Page 76: ...for that service closes another computer on the LAN can use the service in the same manner This way you do not need to configure a new IP address each time you want a different LAN computer to use th...

Page 77: ...e of NAT traversal applications in establishing their own services and opening firewall ports may present network security issues Network information and configuration may also be obtained and modifie...

Page 78: ...gs HES 309M Series User s Guide 78 7 2 WAN Use these settings to configure the WAN connection between the WiMAX Device and the service provider Click Network Setting WAN to open this screen as shown n...

Page 79: ...int Protocol to create VPNs EtherIP Select this if you need to tunnel Ethernet and IEEE 802 3 MAC frames across an IP Internet Bridging LAN ARP This option enables or disables allow ARP requests to cr...

Page 80: ...le this can happen when a desktop computer swaps network interface cards the original NIC may have used its MAC address to register itself on the network and now the new NIC is unrecognized Using a MA...

Page 81: ...ol CHAP It allows for mutual authentication between devices Encryption Use this option to enable or disable authentication Idle Timeout Enter the number of second the WiMAX Device waits during authent...

Page 82: ...reen This screen contains the following fields 7 5 EtherIP Use these settings to configure the peer setting of the EtherIP tunnel between the WiMAX Device and another EtherIP peer Click Network Settin...

Page 83: ...ice and your local network Click Network Setting LAN IP to open this screen as shown next Figure 30 IP Screen This screen contains the following fields Table 24 IP LABEL DESCRIPTION IP address Enter t...

Page 84: ...This screen contains the following fields Table 25 DHCP LABEL DESCRIPTION DHCP Server DHCP Mode Select this if you want the WiMAX Device to be the DHCP server on the LAN As a DHCP server the WiMAX De...

Page 85: ...st Third DNS Server Select how the WiMAX Device acquires its DNS server address None Select this to not use a DNS server From ISP Select this to have the WiMAX Device acquire its DNS server address fr...

Page 86: ...Route RIP to open this screen as shown next Figure 33 RIP Screen Table 26 Static Route LABEL DESCRIPTION Destination This field displays the destination IP address of the static route Subnet Mask This...

Page 87: ...dicates the metric that is being used for redistribution Edit Click this to edit a selected route OK Click this to save any changes to the redistribution table LAN Direction Set the LAN network direct...

Page 88: ...oming traffic for the port forwarding rule End Port This displays the ending port number for incoming traffic for the port forwarding rule Forward Port s Start Port This field displays the beginning o...

Page 89: ...this port forwarding rule active Port Forward Rule Select the type of port forwarding rule Rule Name Enter a name for the port forwarding rule Protocol Select the port forwarding protocol Incoming St...

Page 90: ...e Trigger Protocol This displays the protocol to which the port trigger rule applies Trigger Port s Start End Port This displays the start end trigger port for the port trigger rule Click Add to creat...

Page 91: ...the outgoing port number or range of port numbers that makes the WiMAX Device record the source IP address and assign it to the selected incoming port number s To select one port number enter the por...

Page 92: ...6970 7170 3 The Real Audio server responds using a port number ranging between 6970 7170 4 The WiMAX Device forwards the traffic to Jane s computer IP address Table 31 Port Trigger Wizard LABEL DESCRI...

Page 93: ...ta stream that port range will be tied up so that another computer on the LAN can t trigger it 7 12 DMZ Use this page to set the IP address of your network DMZ if you have one for the WiMAX Device All...

Page 94: ...and helps build H 323 sessions through the WiMAX Device s NAT Enable IPsec ALG Turns on the IPsec ALG to detect IPsec traffic and helps build IPsec sessions through the WiMAX Device s NAT Enable L2TP...

Page 95: ...Screen This screen contains the following fields 7 14 1 Installing UPnP in Windows XP Follow the steps below to install the UPnP in Windows XP 1 Click Start Control Panel 2 Double click Network Connec...

Page 96: ...ng Components Wizard window displays Select Networking Service in the Components selection box and click Details 5 In the Networking Services window select the Universal Plug and Play check box 6 Clic...

Page 97: ...eature in Windows XP You must already have UPnP installed in Windows XP and UPnP activated on the WiMAX Device Make sure the computer is connected to a LAN port of the WiMAX Device Turn on your comput...

Page 98: ...roperties window click Settings to see the port mappings there were automatically created 4 You may edit or delete the port mappings or click Add to manually add port mappings 5 When the UPnP enabled...

Page 99: ...our current Internet connection status 7 14 2 Web Configurator Easy Access With UPnP you can access the web based configurator on the WiMAX Device without finding out the IP address of the WiMAX Devic...

Page 100: ...ide 100 3 Select My Network Places under Other Places 4 An icon with the description for each UPnP enabled device displays under Local Network 5 Right click on the icon for your WiMAX Device and selec...

Page 101: ...t click on the icon for your WiMAX Device and select Properties A properties window displays with basic information about the WiMAX Device 7 15 DDNS Use this page to configure the WiMAX Device as a dy...

Page 102: ...r for the WiMAX Device Service Type Select the dynamic DNS service type Domain Name Enter the domain name Login Name Enter the user name Password Enter the password IP Update Policy Select the policy...

Page 103: ...made through the WiMAX Device Blacklist Whitelist Select whether the current filtering applies to the blacklist sites that are blocked or the whitelist sites that are allowed URL Filter Rule Active I...

Page 104: ...Chapter 7 Network Settings HES 309M Series User s Guide 104...

Page 105: ...al Area Network LAN to be securely connected to the Internet The WiMAX Device can be used to prevent theft destruction and modification of data The WiMAX Device is installed between the LAN and a WiMA...

Page 106: ...oming port number for the WiMAX Device to block If you want to delete this rule click the Delete icon Destination IP This displays the destination IP address for the IP filter rule Click Add to create...

Page 107: ...lays the source MAC for the MAC filter rule Click Add to create a new empty rule then enter the incoming MAC address for the WiMAX Device to block If you want to delete this rule click the Delete icon...

Page 108: ...mes unreachable to other devices Prevent from ICMP Flood Select this to monitor for and block ICMP flood attacks An ICMP flood is a type of denial of service attack where an overwhelming number of ICM...

Page 109: ...rect attacks An ICMP redirect attack is one where forged ICMP redirect messages can force the client device to route packets for certain connections through an attacker s host Prevent from PING of Dea...

Page 110: ...Chapter 8 Security HES 309M Series User s Guide 110...

Page 111: ...ions Remote management over LAN or WAN will not work when 1 You have disabled that service in one of the remote management screens 2 The IP address in the Secured Client IP field does not match the cl...

Page 112: ...longer than this timeout period The management session does not time out when a statistics screen is polling SNMP Simple Network Management Protocol SNMP is a protocol used for exchanging management i...

Page 113: ...re it appropriately The ACS server which it will use must also be configured by its administrator Figure 47 TR 069 Example In this example the WiMAX Device receives data from at least 3 sources A SIP...

Page 114: ...such as number of packets received node port status etc A Management Information Base MIB is a collection of managed objects SNMP allows a manager and agents to communicate for the purpose of accessi...

Page 115: ...ng with a string of management operations 3 3 The client responds to the management operations 4 perhaps confirming file alterations or confirming receipt of file uploads and so on Table 40 SNMP Traps...

Page 116: ...atibility credentials are nonetheless passed between the web browser and the server in plaintext making it extremely easy to intercept and read As such it is rarely used anymore Digest Access Authenti...

Page 117: ...mple in the preceding figure the URI for the Games folder is Vendor Games The Vendor portion of the URI exists on all devices that conform to the OMA DM standard The Games folder however may or may no...

Page 118: ...managing the WiMAX Device Click Maintenance Password to open this screen as shown next Figure 51 Password Screen This screen contains the following fields Table 41 Password LABEL DESCRIPTION Change P...

Page 119: ...Enter the password for this username Table 41 Password continued LABEL DESCRIPTION Table 42 HTTP LABEL DESCRIPTION HTTP Server Enable Select this to enable remote management using this service Port Nu...

Page 120: ...Session Timeout Session Timeout Enter the number of minutes 0 99 the WiMAX Device waits to delete an inactive web connection HTTP or HTTPS Table 42 HTTP continued LABEL DESCRIPTION Table 43 Telnet LAB...

Page 121: ...contains the following fields Table 44 SSH LABEL DESCRIPTION Enable Select this to enable remote management using this service Port Number Enter the port number this service can use to access the WiMA...

Page 122: ...Floor 6 Building A New York City Contact Enter contact information for the administrator managing the SNMP server for example Bill Smith IT Dept 555 555 5454 Read Community Enter the password for the...

Page 123: ...g this service ACS Server URL Enter the URL or IP address of the auto configuration server Bootstrap Enable Select this to enable bootstrap events ACS Username Enter the user name sent when the WiMAX...

Page 124: ...up to 31 alphanumeric characters a z A Z 0 9 and underscores but spaces are not allowed Note This must be provided by the ACS administrator Connection Request Password Enter the connection request pas...

Page 125: ...the OMA DM server set up in the preceding field Server Auth Type Select the encryption algorithm scheme used by the OMA DM server to communicate with client devices If the scheme selected here does n...

Page 126: ...ord are encoded using a Digest Access Authentication Code HMAC Server ID and Password are encoded using a keyed Hash Message Authentication Code Note Make sure that the scheme selected here matches th...

Page 127: ...e LABEL DESCRIPTION Manual New Time Enter the new time in this field New Date Enter the new date in this field Get from Time Server Time Protocol Select the time service protocol that your time server...

Page 128: ...ol and may take up to two minutes After a successful upload the system restarts Contact your service provider for information on available firmware upgrades Note Only use firmware for your WiMAX Devic...

Page 129: ...mporary network disconnect Note Do not turn off the device while firmware upload is in progress After two minutes log in again and check your new firmware version in the Status screen You might have t...

Page 130: ...owing fields 9 13 CWMP Upgrade Use this screen to upgrade the firmware on the WiMAX Device using CWMP Request Download Click Maintenance Firmware Upgrade CWMP Upgrade to open this screen as shown next...

Page 131: ...EL DESCRIPTION Upgrade Click this to begin upgrading firmware using CWMP Request This may take up to two minutes Note Do not turn off the device while firmware upload is in progress Table 53 Backup Re...

Page 132: ...upload is in progress If the WiMAX Device s IP address is different in the configuration file you selected you may need to change the IP address of your computer to be in the same subnet as that of t...

Page 133: ...lt settings Click Maintenance Backup Restore Factory Defaults to open this screen as shown next Figure 65 Factory Defaults Screen This screen contains the following fields 9 17 Log Setting Use this sc...

Page 134: ...Select this to have the WiMAX Device log network activity according to the selected Log Level Log Level Select the type of logs to record Enable Remote Log Select this to allow logs to be recorded an...

Page 135: ...of the WiMAX Device You may log in again within a few minutes of using the reboot button Click Maintenance Reboot to open this screen as shown next Figure 69 Reboot Screen Table 58 About LABEL DESCRI...

Page 136: ...wing fields Table 59 Reboot LABEL DESCRIPTION Reboot Click this button to have the device perform a software restart The Power LED blinks as it restarts and the shines steadily if the restart is succe...

Page 137: ...on None of the LEDs turn on 1 Make sure you are using the power adapter or cord included with the WiMAX Device 2 Make sure the power adapter or cord is connected to the WiMAX Device and plugged in to...

Page 138: ...o do this in most Windows computers click Start Run enter cmd and then enter ipconfig The IP address of the Default Gateway might be the IP address of the WiMAX Device it depends on the network so ent...

Page 139: ...6 If the problem continues contact the network administrator or vendor or try one of the advanced suggestions Advanced Suggestions Try to access the WiMAX Device using another service such as Telnet...

Page 140: ...AX settings The WiMAX Device may have been set to search the wrong frequencies for a wireless connection See Chapter 6 on page 51 If you are unsure of the correct values contact your service provider...

Page 141: ...e a lot of traffic on the network Look at the LEDs and check Section 1 2 1 on page 18 If the WiMAX Device is sending or receiving a lot of information try closing some programs that use the Internet e...

Page 142: ...the Reset button when the Power LED begins to blink The default settings have been restored If the WiMAX Device restarts automatically wait for the WiMAX Device to finish restarting and log in to the...

Page 143: ...put LAN Port RJ 45 Interface 1 Port 10 100BaseT AUTO MDI MDIX Reset Button Restore to Factory Default Button System Reset System configuration can be restored to factory default if hold the Reset Butt...

Page 144: ...E 802 16e Mobile WiMAX corrigendum 1 2 and WiMAX Forum Wave 2 System Profiles Operating Frequency Band 3 3GHz 3 6GHz HES 319M 2 3GHz 2 4GHz HES 339M 2 5GHz 2 7GHz HES 309M Certification Profile Suppor...

Page 145: ...nditions defined in IEEE 802 16e 2005 Receiver Diversity Maximum Ratio Combining MRC Receiver Adjacent Channel Rejection The receiver adjacent channel rejection measured under the conditions defined i...

Page 146: ...Chapter 11 Product Specifications HES 309M Series User s Guide 146...

Page 147: ...iMAX supports EAP Extensible Authentication Protocol RFC 2486 which allows additional authentication methods to be deployed with no changes to the base station or the mobile or subscriber stations PKM...

Page 148: ...s are exchanged between the base station and the RADIUS server for user authentication Access Request Sent by an base station requesting authentication Access Reject Sent by a RADIUS server rejecting...

Page 149: ...es and encrypts using the authentication key Encrypted traffic The MS SS decrypts the TEK using the authentication key Both stations can now securely encrypt and decrypt the data flow CCMP All traffic...

Page 150: ...only the server side authentications to establish a secure connection with EAP TLS digital certifications are needed by both the server and the wireless clients for mutual authentication Client authen...

Page 151: ...ommunicate with the other devices on your network Windows Vista XP 2000 Mac OS 9 OS X and all versions of UNIX LINUX include the software components you need to use TCP IP on your computer If you manu...

Page 152: ...ndows XP NT 2000 The following example uses the default Windows XP display theme but can also apply to Windows 2000 and Windows NT 1 Click Start Control Panel Figure 70 Windows XP Start Menu 2 In the...

Page 153: ...Guide 153 3 Right click Local Area Connection and then select Properties Figure 72 Windows XP Control Panel Network Connections Properties 4 On the General tab select Internet Protocol TCP IP and then...

Page 154: ...address that was assigned to you by your network administrator or ISP You may also have to enter a Preferred DNS server and an Alternate DNS server if that information was provided 7 Click OK to clos...

Page 155: ...ection shows screens from Windows Vista Professional 1 Click Start Control Panel Figure 75 Windows Vista Start Menu 2 In the Control Panel click the Network and Internet icon Figure 76 Windows Vista C...

Page 156: ...connections Figure 78 Windows Vista Network and Sharing Center 5 Right click Local Area Connection and then select Properties Figure 79 Windows Vista Network and Sharing Center Note During this proce...

Page 157: ...ix B Setting Up Your Computer s IP Address HES 309M Series User s Guide 157 6 Select Internet Protocol Version 4 TCP IPv4 and then select Properties Figure 80 Windows Vista Local Area Connection Prope...

Page 158: ...tic IP address that was assigned to you by your network administrator or ISP You may also have to enter a Preferred DNS server and an Alternate DNS server if that information was provided Click Advanc...

Page 159: ...e 159 Mac OS X 10 3 and 10 4 The screens in this section are from Mac OS X 10 4 but can also apply to 10 3 1 Click Apple System Preferences Figure 82 Mac OS X 10 4 Apple Menu 2 In the System Preferenc...

Page 160: ...rences pane opens select Built in Ethernet from the network connection type list and then click Configure Figure 84 Mac OS X 10 4 Network Preferences 4 For dynamically assigned settings select Using D...

Page 161: ...tatically assigned settings do the following From the Configure IPv4 list select Manually In the IP Address field type your IP address In the Subnet Mask field type your subnet mask In the Router fiel...

Page 162: ...User s Guide 162 Click Apply Now and close the window Verifying Settings Check your TCP IP properties by clicking Applications Utilities Network Utilities and then selecting the appropriate Network In...

Page 163: ...309M Series User s Guide 163 Mac OS X 10 5 The screens in this section are from Mac OS X 10 5 1 Click Apple System Preferences Figure 88 Mac OS X 10 5 Apple Menu 2 In System Preferences click the Netw...

Page 164: ...ist of available connection types Figure 90 Mac OS X 10 5 Network Preferences Ethernet 4 From the Configure list select Using DHCP for dynamically assigned settings 5 For statically assigned settings...

Page 165: ...ng Up Your Computer s IP Address HES 309M Series User s Guide 165 In the Router field enter the IP address of your WiMAX Device Figure 91 Mac OS X 10 5 Network Preferences Ethernet 6 Click Apply and c...

Page 166: ...inux Ubuntu 8 GNOME This section shows you how to configure your computer s TCP IP settings in the GNU Object Model Environment GNOME using the Ubuntu 8 Linux distribution The procedure screens and fi...

Page 167: ...ure 93 Ubuntu 8 System Administration Menu 2 When the Network Settings window opens click Unlock to open the Authenticate window By default the Unlock button is greyed out until clicked You cannot mak...

Page 168: ...icate window enter your admin account name and password then click the Authenticate button Figure 95 Ubuntu 8 Administrator Account Authentication 4 In the Network Settings window select the connectio...

Page 169: ...erties In the Configuration list select Automatic Configuration DHCP if you have a dynamic IP address In the Configuration list select Static IP address if you have a static IP address Fill in the IP...

Page 170: ...in the Network Settings window and then enter the DNS server information in the fields provided Figure 98 Ubuntu 8 Network Settings DNS 8 Click the Close button to apply the changes Verifying Settings...

Page 171: ...Appendix B Setting Up Your Computer s IP Address HES 309M Series User s Guide 171 tab The Interface Statistics column shows data if your connection is working properly Figure 99 Ubuntu 8 Network Tools...

Page 172: ...distribution The procedure screens and file locations may vary depending on your specific distribution release version and individual configuration The following screens use the default openSUSE 10 3...

Page 173: ...73 2 When the Run as Root KDE su dialog opens enter the admin password and click OK Figure 101 openSUSE 10 3 K Menu Computer Menu 3 When the YaST Control Center window opens select Network Devices and...

Page 174: ...IP Address HES 309M Series User s Guide 174 4 When the Network Settings window opens click the Overview tab select the appropriate connection Name from the list and then click the Configure button Fig...

Page 175: ...lick the Address tab Figure 104 openSUSE 10 3 Network Card Setup 6 Select Dynamic Address DHCP if you have a dynamic IP address Select Statically assigned IP Address if you have a static IP address Fi...

Page 176: ...s Guide 176 8 If you know your DNS server IP address es click the Hostname DNS tab in Network Settings and then enter the DNS server information in the fields provided Figure 105 openSUSE 10 3 Networ...

Page 177: ...on the Task bar to check your TCP IP properties From the Options sub menu select Show Connection Information Figure 106 openSUSE 10 3 KNetwork Manager When the Connection Status KNetwork Manager windo...

Page 178: ...Appendix B Setting Up Your Computer s IP Address HES 309M Series User s Guide 178...

Page 179: ...et Explorer versions may vary Internet Explorer Pop up Blockers You may have to disable pop up blocking to log into your device Either disable pop up blocking enabled by default in Windows XP SP Servi...

Page 180: ...in the Pop up Blocker section of the screen This disables any web pop up blockers you may have enabled Figure 109 Internet Options Privacy 3 Click Apply to save this setting Enable Pop up Blockers wi...

Page 181: ...09M Series User s Guide 181 2 Select Settings to open the Pop up Blocker Settings screen Figure 110 Internet Options Privacy 3 Type the IP address of your device the web page that you do not want to h...

Page 182: ...ck Add to move the IP address to the list of Allowed sites Figure 111 Pop up Blocker Settings 5 Click Close to return to the Privacy screen 6 Click Apply to save this setting JavaScript If pages of th...

Page 183: ...lorer click Tools Internet Options and then the Security tab Figure 112 Internet Options Security 2 Click the Custom Level button 3 Scroll down to Scripting 4 Under Active scripting make sure that Ena...

Page 184: ...ck OK to close the window Figure 113 Security Settings Java Scripting Java Permissions 1 From Internet Explorer click Tools Internet Options and then the Security tab 2 Click the Custom Level button 3...

Page 185: ...ns HES 309M Series User s Guide 185 5 Click OK to close the window Figure 114 Security Settings Java JAVA Sun 1 From Internet Explorer click Tools Internet Options and then the Advanced tab 2 Make sur...

Page 186: ...ck OK to close the window Figure 115 Java Sun Mozilla Firefox Mozilla Firefox 2 0 screens are used here Screens for other versions may vary You can enable Java Javascript and pop ups in one screen Cli...

Page 187: ...up Windows JavaScript and Java Permissions HES 309M Series User s Guide 187 Click Content to show the screen below Select the check boxes as shown in the following screen Figure 117 Mozilla Firefox Co...

Page 188: ...Appendix C Pop up Windows JavaScript and Java Permissions HES 309M Series User s Guide 188...

Page 189: ...rk number and the other part is the host ID In the same way that houses on a street share a common street name the hosts on a network share a common network number Similarly as each house has its own...

Page 190: ...logical AND operation The term subnet is short for sub network A subnet mask has 32 bits If a bit in the subnet mask is a 1 then the corresponding bit in the IP address is part of the network number I...

Page 191: ...number bits the smaller the number of remaining host ID bits An IP address with host IDs of all zeros is the IP address of the network 192 168 1 0 with a 24 bit subnet mask for example An IP address...

Page 192: ...You can use subnetting to divide one network into multiple sub networks In the following example a network administrator creates two sub networks to isolate a group of servers from the rest of the co...

Page 193: ...netting Figure 119 Subnetting Example Before Subnetting You can borrow one of the host ID bits to divide the network 192 168 1 0 into two separate sub networks The subnet mask is now 25 bits 255 255 2...

Page 194: ...5 255 128 is subnet A itself and 192 168 1 127 with mask 255 255 255 128 is its broadcast address Therefore the lowest IP address that can be assigned to an actual host for subnet A is 192 168 1 1 and...

Page 195: ...MBER LAST OCTET BIT VALUE IP Address 192 168 1 64 IP Address Binary 11000000 10101000 00000001 01000000 Subnet Mask Binary 11111111 11111111 11111111 11000000 Subnet Address 192 168 1 64 Lowest Host I...

Page 196: ...192 168 1 255 Highest Host ID 192 168 1 254 Table 67 Subnet 4 continued IP SUBNET MASK NETWORK NUMBER LAST OCTET BIT VALUE Table 68 Eight Subnets SUBNET SUBNET ADDRESS FIRST ADDRESS LAST ADDRESS BROA...

Page 197: ...please do not use any other number unless you are told otherwise You must also enable Network Address Translation NAT on the WiMAX Device Once you have decided on the network number pick an IP addres...

Page 198: ...ith the Internet addresses for your local networks On the other hand if you are part of a much larger organization you should consult your network administrator for the appropriate IP addresses Regard...

Page 199: ...r example if a router is set between a LAN and the Internet WAN the router s LAN and WAN addresses must be on different subnets In the following example the LAN and WAN are on the same subnet The LAN...

Page 200: ...ES 309M Series User s Guide 200 The computer cannot access the Internet This problem can be solved by assigning a different IP address to the computer or the router s LAN port Figure 123 Conflicting C...

Page 201: ...itimate Many ZyXEL products such as the NSA 2401 issue their own public key certificates These can be used by web browsers on a LAN or WAN to verify that they are in fact connecting to the legitimate...

Page 202: ...however they can also apply to Internet Explorer on Windows Vista 1 If your device s web configurator is set to use SSL certification then the first time you browse to it you are presented with a cer...

Page 203: ...9M Series User s Guide 203 3 In the Address Bar click Certificate Error View certificates Figure 126 Internet Explorer 7 Certificate Error 4 In the Certificate dialog box click Install Certificate Fig...

Page 204: ...e Import Wizard click Next Figure 128 Internet Explorer 7 Certificate Import Wizard 6 If you want Internet Explorer to Automatically select certificate store based on the type of certificate click Nex...

Page 205: ...e all certificates in the following store and then click Browse Figure 130 Internet Explorer 7 Certificate Import Wizard 8 In the Select Certificate Store dialog box choose a location in which to save...

Page 206: ...r s Guide 206 9 In the Completing the Certificate Import Wizard screen click Finish Figure 132 Internet Explorer 7 Certificate Import Wizard 10 If you are presented with another Security Warning click...

Page 207: ...te installation message Figure 134 Internet Explorer 7 Certificate Import Wizard 12 The next time you start Internet Explorer and go to a ZyXEL web configurator page a sealed padlock icon appears in t...

Page 208: ...when prompted you can install a stand alone certificate file if one has been issued to you 1 Double click the public key certificate file Figure 136 Internet Explorer 7 Public Key Certificate File 2 I...

Page 209: ...plorer This section shows you how to remove a public key certificate in Internet Explorer 7 1 Open Internet Explorer and click TOOLS Internet Options Figure 138 Internet Explorer 7 Tools Menu 2 In the...

Page 210: ...cates Authorities tab select the certificate that you want to delete and then click Remove Figure 140 Internet Explorer 7 Certificates 4 In the Certificates confirmation click Yes Figure 141 Internet...

Page 211: ...Appendix E Importing Certificates HES 309M Series User s Guide 211 6 The next time you go to the web site that issued the public key certificate you just removed a certification error appears...

Page 212: ...ional however the screens can also apply to Firefox 2 on all platforms 1 If your device s web configurator is set to use SSL certification then the first time you browse to it you are presented with a...

Page 213: ...13 3 The certificate is stored and you can now connect securely to the web configurator A sealed padlock appears in the address bar which you can click to open the Page Info Security window to view th...

Page 214: ...sing to a ZyXEL web configurator and installing a public key certificate when prompted you can install a stand alone certificate file if one has been issued to you 1 Open Firefox and click TOOLS Optio...

Page 215: ...es Import Figure 147 Firefox 2 Certificate Manager 4 Use the Select File dialog box to locate the certificate and then click Open Figure 148 Firefox 2 Select File 5 The next time you visit the web sit...

Page 216: ...g a Certificate in Firefox This section shows you how to remove a public key certificate in Firefox 2 1 Open Firefox and click TOOLS Options Figure 149 Firefox 2 Tools Menu 2 In the Options dialog box...

Page 217: ...t the certificate that you want to remove and then click Delete Figure 151 Firefox 2 Certificate Manager 4 In the Delete Web Site Certificates dialog box click OK Figure 152 Firefox 2 Delete Web Site...

Page 218: ...ws XP Professional however the screens can apply to Opera 9 on all platforms 1 If your device s web configurator is set to use SSL certification then the first time you browse to it you are presented...

Page 219: ...es HES 309M Series User s Guide 219 3 The next time you visit the web site click the padlock in the address bar to open the Security information window to view the web page s security details Figure 1...

Page 220: ...d Alone Certificate File in Opera Rather than browsing to a ZyXEL web configurator and installing a public key certificate when prompted you can install a stand alone certificate file if one has been...

Page 221: ...Appendix E Importing Certificates HES 309M Series User s Guide 221 2 In Preferences click ADVANCED Security Manage certificates Figure 156 Opera 9 Preferences...

Page 222: ...Series User s Guide 222 3 In the Certificates Manager click Authorities Import Figure 157 Opera 9 Certificate manager 4 Use the Import certificate dialog box to locate the certificate and then click...

Page 223: ...icate dialog box click Install Figure 159 Opera 9 Install authority certificate 6 Next click OK Figure 160 Opera 9 Install authority certificate 7 The next time you visit the web site click the padloc...

Page 224: ...24 Removing a Certificate in Opera This section shows you how to remove a public key certificate in Opera 9 1 Open Opera and click TOOLS Preferences Figure 161 Opera 9 Tools Menu 2 In Preferences ADVA...

Page 225: ...ant to remove and then click Delete Figure 163 Opera 9 Certificate manager 4 The next time you go to the web site that issued the public key certificate you just removed a certification error appears...

Page 226: ...Konqueror 3 5 on all Linux KDE distributions 1 If your device s web configurator is set to use SSL certification then the first time you browse to it you are presented with a certification error 2 Cl...

Page 227: ...rting Certificates HES 309M Series User s Guide 227 4 Click the padlock in the address bar to open the KDE SSL Information window and view the web page s security details Figure 166 Konqueror 3 5 KDE...

Page 228: ...n prompted you can install a stand alone certificate file if one has been issued to you 1 Double click the public key certificate file Figure 167 Konqueror 3 5 Public Key Certificate File 2 In the Cer...

Page 229: ...Importing Certificates HES 309M Series User s Guide 229 3 The next time you visit the web site click the padlock in the address bar to open the KDE SSL Information window to view the web page s securi...

Page 230: ...onqueror and click Settings Configure Konqueror Figure 170 Konqueror 3 5 Settings Menu 2 In the Configure dialog box select Crypto 3 On the Peer SSL Certificates tab select the certificate you want to...

Page 231: ...Importing Certificates HES 309M Series User s Guide 231 Note There is no confirmation when you remove a certificate authority so be absolutely certain you want to go through with it before clicking t...

Page 232: ...Appendix E Importing Certificates HES 309M Series User s Guide 232...

Page 233: ...her information about port numbers If the Protocol is TCP UDP or TCP UDP this is the IP port number If the Protocol is USER this is the IP protocol number Description This is a brief explanation of th...

Page 234: ...Internet Group Management Protocol is used when sending packets to a specific group of hosts IKE UDP 500 The Internet Key Exchange algorithm is used for key distribution and management IRC TCP UDP 666...

Page 235: ...is the message exchange standard for the Internet SMTP enables you to move messages from one e mail server to another SNMP TCP UDP 161 Simple Network Management Program SNMP TRAPS TCP UDP 162 Traps fo...

Page 236: ...Transfer Protocol is an Internet file transfer protocol similar to FTP but uses the UDP User Datagram Protocol rather than TCP Transmission Control Protocol VDOLIVE TCP 7000 Another videoconferencing...

Page 237: ...erein Neither does it convey any license under its patent rights nor the patent rights of others ZyXEL further reserves the right to make changes in any products described herein without notice This p...

Page 238: ...ause harmful interference to radio communications However there is no guarantee that interference will not occur in a particular installation If this device does cause harmful interference to radio te...

Page 239: ...is product is free from any defects in materials or workmanship for a period of up to two years from the date of purchase During the warranty period and upon proof of purchase should the product have...

Page 240: ...lity or fitness for a particular use or purpose ZyXEL shall in no event be held liable for indirect or consequential damages of any kind to the purchaser To obtain the services of this warranty contac...

Page 241: ...BS BS 51 52 links 52 C CA 53 54 CBC MAC 149 CCMP 147 149 cell 51 certificates 147 CA 53 formats 54 verification 149 certification notices 239 viewing 239 Certification Authority see CA chaining 149 c...

Page 242: ...MAC 149 MAN 51 Management Information Base MIB 114 Message Authentication Code see MAC message integrity 149 Metropolitan Area Network see MAN microwave 51 52 mobile station see MS MS 52 N NAT 197 an...

Page 243: ...73 TEK 149 TFTP restrictions 111 TLS 147 transport encryption key see TEK transport layer security see TLS trigger port forwarding process 92 TTLS 147 150 tunneled TLS see TTLS U unauthorized device 1...

Page 244: ...Index HES 309M Series User s Guide 244...

Page 245: ...Index HES 309M Series User s Guide 245...

Page 246: ...Index HES 309M Series User s Guide 246...

Reviews:

No comments